Of these points, #2 squares particularly well with my experience (there is a constant gold rush for top talent in software security), but the "how" vs. "why" thing rings false; all sharp questions are good, even if they're draining.

Glad to hear someone well-respected sticking up for cover letters, since there appears to be some controversy about whether they're valuable.