Is having long tenure at a company a potential negative?

Nowadays it seems like the norm is to hop around every 1-3 years but on the contrary, what about staying at a company for multiple years? Would you view this as being "lazy" or stagnant. Or would you see it as a positive so long as they were getting opportunities to continually grow and develop their skills and progressing within the company?

cybersecurity opportunities skills tenure the company