Abstraction is the art of making assumptions. The other levels are not managed by idiots. The entire thing does comprise a whole. There is a point to all this... there is a point, right?
If you have responsibility for security, but no authority to make changes, then you're just there to take the blame when something goes wrong.