Compromised does not have to be destructive intent. It can be nothing but passive intelligence gathering for example. Furthermore, compromised entities are rare

Compromised does not have to be destructive intent. It can be nothing but passive intelligence gathering for example. Furthermore, compromised entities are rarely compromised by just one entity. For example national intelligence agencies are obligated to monitor new and rising political or activistic activities in order to asses if they are threat or not.This raises the % of compromised entities a lot. And then there is private intelligence & interest groups; same story. Yet in general, I do agree with your conclusions. Often the fear of being compromised is more dangerous than actually being compromised.