In truth, I encounter a similar problem in network security all the time though one has died yet. For some reason, management doesn't want to talk about the nuts-and-bolts of security when we have time to do it with careful and considered planning. However, when something happens, management goes into a panic and demands an immediate fix. If that was not bad enough, the definition of a "fix" is: If we can check it off on a customer's checklist, everything is fine.
Security Theater can be played by anyone but it kills more people when governments do it.