The biggest myth in cybersecurity is that there is some sort of secret slush fund of money going to waste, such as buying coffee for employees. The cybersecurity guys firmly believe that this money can be better spent on improving security, such as appsec code scanners, a better IPS, training for employees, or more employees.
