Reading about attacks and defenses builds knowledge; breaking and fixing things in a personal lab builds intuition. Hands-on experimentation in a safe environment teaches the visceral lessons that no course or certification delivers.
“You learn security by breaking things you're allowed to break.”