In the world of software, it's becoming increasingly clear that an SBOM (Software Bill of Materials) is necessary. But is it sufficient? One could be forgiven for thinking so, given how much emphasis has been placed on it lately.