I am optimistic. Good security is possible
One can engineer reliable systems out of unreliable parts
We have the home-field advantage: we can choose to set the rules on our hosts
World-class encryption is now available and cheap
The Bad Guys are giving us lots of practice