Certs vs Experience

Asking for a friend. Say you reach 20+ years of InfoSec experience with demonstrated progress. (I know there is a lot to assume, roll with me here.)

Are certifications like CISSP and/or CCSP equally as valuable or less valuable along side the experience?

I'm, I mean my friend, is trying to figure out if they should take a tactical pause for some base certs like CISSP or just keep pushing the career. (No formal education, hacking out of necessity since …

asking ccsp certifications cissp cybersecurity equally experience infosec progress roll