> I think there's great overlap between servers that aren't monitored and servers that are vulnerable to exploits.

Agreed. CC mining would be CPU on most servers, and go undetected for the same reasons. Some servers and gaming rigs would have GPUs, but not many vs CPUs.