Also the attackers have plenty of time to snoop, wait and watch for an opening. If you were breaking into a real bank then hanging around drilling or whatever is very noticeable and limits your options. I assume they are always scanning for unauthorised access but it only takes one chink and they are very attractive prospects for hackers so the motivation is there.