That's a pretty good theory. It even shows up in the start-up world: those companies that invest in good security and proper IT infra have a short term disadvantage compared to the ones that don't, which actually may have the effect that those that don't eventually win out at which point they will either end up with a massive security issue or they get wise and fix things in time. It's not a level playing field and tricks like this can easily make a big difference in outcome.