Good points. Not to mention that a large, visible target like Google would attract even more people with malicious intent since the payoffs would be much higher

Good points. Not to mention that a large, visible target like Google would attract even more people with malicious intent since the payoffs would be much higher. And no, Google is not invulnerable, as evidenced by last year's intrusions that originated from China.