Are all security consultants useless?

I’ve interacted with a few sec consultants and they fall into three buckets generally: 1. Not the most well versed in the topics but reading from the playbook and making an effort. I can see being upset about this but, also in my experience, there has been multiple levels of higher-up unfamiliarity with the space but a lot of “strong decision making” to coordinate the engagement. 2. Competent, and potentially creative and smart, people on our engagement who hampered by constraints that **my org** has put on the engagement. I don’t know that we’re unique but we’re definitely paying down bad decisions for several years ago. I’ve also had folks in my org asking the wrong questions of the consultants. 3. Rubber stamp consultancies that say “yes” to everything and then hope that they can figure it out later with billable hours. I’ve relayed specifics as to the issues that were running up against pre-engagement. Same issues in the engagement kick-off. And then asked to clarify again and confirm their findings that they cannot achieve what they were being asked to achieve when I also pointed out that it is unachievable at least twice. They’re hustling for hours and they’ll pitch parallel-thinking solutions that we have already dismissed, and I think everyone ends up unhappy on those. They’re my least favorite of the bunch. They say yes to anything. I haven’t come across anyone who is outright incapable of doing their job, but I have seen a range of job-doing ability and my org is not the easiest to just show up in as a consultant so that probably emphasizes the aspect of experience. We have some major configurations that are just straight up inadvisable, and we’ve struggled to get that in black and white from a lot of people because they’re scared to upset the client. Subsequently, time and money have been wasted. My recommendation is to enter into an engagement only when it is very clear what the statement of work is. And I mean so clearly that it should probably have an implementation plan because we’ve been left hanging mid-engagement on things. So maybe there is another layer of soft skill that needs to be in play here to figure out if the consultants mean business and they’re capable of executing it. And that has to be coming from someone who is ok pulling the plug on the engagement, if not the project.