Why compliance is a threat

Compliance as we know it is arguably one of the greatest threats to enterprise security. Here's why:

1. It creates a heightened sense of self for those responsible for accomplishing a state of compliance.
   
2. It can cost more to become "compliant" than it does to create a reasonably secure environment.
3. It empowers government.

All of the above create complacency and a false sense of security. Please tell me I'm wrong.