"everything else in the data center" is a little missleading, and quite frankly an exaggeration in my experience. one compromised server will not bring down rackspace, for instance. or even our little three row DC.

i also do not think missing just one step in security will do it(although it can), unless you miss a big step, most places i have seen exploited were doing a number of things incorrectly.