"The only security you have is the fact that there aren't nearly enough criminals to exploit all of the info that has already been stolen" This is pretty much

"The only security you have is the fact that there aren't nearly enough criminals to exploit all of the info that has already been stolen" This is pretty much the case, to include security vulnerabilities in most systems as well. Most just are not exploited because their arent enough criminals with enough time.