I learned yesterday that Mudge's degree is from the Berklee College of Music (a top school for music performance):
https://en.wikipedia.org/wiki/Peiter_Zatko
So I think that's a great example of how someone with a music degree could potentially be one of the world's top infosec experts. (Also I believe Chris Palmer, who used to be my boss and currently works on the Google Chrome security team, has a degree in linguistics but would probably have been rather tempted by a music degree considering his huge passion for music performance.)
I think it's worth considering what really does make for good infosec qualifications, but it's easy to see that it's not necessarily a university degree. (Also considering how many leading infosec experts didn't finish university.)
