Big companies are quietly changing how they think about security, when the conversation is beyond built-in privacy measures.