Agree w gparent. The thieves largely use the same toolsets and aren't making bespoke tools for each job. If the obfuscation volume doesn't rise to a level where it is worth addressing by a standard toolset then the thieves won't have access.