A big part of it is the same asymmetry you see with security. All the other side needs is one mistake that leaves an opening.