In a sense, more people working towards secret protection generally did result in better secret protection, like encryption algorithms and secure architecture and whatnot.

It only starts to become a paradox when you get into actually executing the task of protecting a specific secret… but I think we could draw that line somewhere for almost any task.

There is a point of generality where more people means better results and a point of specificity where you only want the exact right number of people.