Your order also captures permanence. If another actor gains access to the data, I cant revoke it. If I lose the data, I cant access it. If I cant access the data now, I can try again later.
On your second point ... Im not sure. Sony is still in business. Equifax and co are still printing money. OPM is still around. Security and trust doesnt seem so binary in practice.
Security, Durability, Availability.
From my perspective, that's the order of importance too, but any one without the other two and you're not going to gain or retain customers.