The "security budget" argument was always the dumbest justification. If your security model depends on fads that plummet in value overnight, that's a really bad idea.