He's saying we know how to increase the energy needed to compromise a system, while spending less energy than would otherwise happen in the case of compromise. The harder a task is, the less often the task occurs.

Yes hacks still happen. See pharrington's response. I don't think it's easy to create a secure system. I'm in favor of making software more difficult to hack. I think the Heartbleed example speaks for itself.