The point is that the energy they are spending on mining disincentivizes them from doing anything except using it to earn Bitcoins legitimately. If they waste that energy attacking the network instead, it would be less profitable.