And still our nuclear power plants, air traffic, and other infrastructure aren't constantly down because of malware.

If malware was an order of magnitude worse than it is today, then you'd see military death squads breaking down doors and stamping it out. Kind of like the navy with respect to (actual) piracy and international trade.

We reach the saddle points and equilibria that we do because most of the distributed parties are constraint-satisfied. Tip the scale, incur stronger balancing.