The rational response would be to argue for both.
Absolutely. The best security plan is one that consists of several layers.