Also the defender has to be right every time, the attacker just has to be right once.

(Defence in depth does mitigate this somewhat. The attacker has to be right two or three times)