Is Threat-Centric Security Running so Fast just to Stand Still?