Can any target environment ever be perfectly stable or predictable? Why or why not? Why does the author stress that security efforts for any target environment are a "never-ending process" and that security objectives change over time? How can complacency pose a problem for security professionals?