zero commercial airline pilot pre-flight checklists covered things like "missing bolts causing the plane to depresurize" and "the wheels keep falling off".
computer security works in very much the same way - "compliance" is that preflight checklist. its a bunch of checkboxes you should look at before flying (and the FAA will essentially force you to because its the rules)
but it ABSOLUTELY does not cover everything, and MANY THINGS WILL KILL YOU that arent on the checklist.
