As several people responding here have already noted, what this suggests is there is broad downward pressure on what companies are willing to pay for security.
Which again seems slightly nuts when you think about how the costs of not paying adequately for security are increasing. I mean, the security headlines just in the past week alone are frankly terrifying and to my mind paint a pretty grim near-term future cyber-wise.
Perhaps the costs of not investing enough in security are not high enough yet?