I think what he is saying it the level of danger from attack is...

I think what he is saying it the level of danger from attack is getting bigger, what he has not be clear on is the steps that companies and governments will take to protect themselves, the key most will look at is who developed the software, where the crypto libraries have come from, how the platforms are maintained etc. The 5 eyes countries, including NATO are very unlikely to buy a product which has not been built by them for them. There are a number of next generation security platforms emerging which do not use either SDWAN or VPN and also secure all traffic regarless of pipesize.