in reality, at some point it's just not cost effective anymore (for the attacker) and other targets become more promising.