> Beefing up security at each organization isn’t fixing the underlying problem. It’s just making the next entity the more likely target.

This reminds me of the old saying about locking your bicycle on the street. It won't 100% prevent yours from being stolen, but if the other bikes around yours has less secure means of locking, then the thief will likely take those bikes instead of yours.