I wish I had a nickel for every time I hear someone say this. It's just patently not true unless you are running the worst security program imaginable.
Who has only one layer of defence? Who does NO monitoring?
We have been talking about defence in depth for... 30 years?
FUD doesn't help anyone. It isn't selling more product and it isn't making your crappy paper any more important.