There is no point in having two sip.conf sections here.
Note that canreinvite is deprecated or may have been removed; you should use directmedia.
On current versions, using remotesecret with insecure defaulting to no is cleaner than using insecure=invite.
insecure=invite has no effect, unless you also specify a secret, so there was no need to specify insecure=no in you first section.
If you had had needed separate incoming and outgoing sections, putting them in separate files would have been purely for your administrative convenience, so only you could answer the question.
If you actually needed the insecure in your current configuration it is because your incoming section isn’t being used. Asterisk can only use the IP address and port to match an incoming call to section and you have two sections with the same information