> I think this does not acknowledge how incredibly asymmetric the difficulty is on each side. It is expensive and difficult to protect against security breaches, even with specialised software and expensive dedicated cybersecurity teams.

I'm curious how much the "locked door" idea comes into play here. Locking your doors doesn't keep out thieves. Rather, it makes you less of a target because you're more difficult than others that didn't lock their doors. Is it reasonable to assume that, the more you protect your system, the less likely you are to be attacked... even if you don't do a perfect job.

I would guess the answer is a definitive yes.