Yes, this. Also, there is a saying in the security world, "Attacks only get better over time." I consult on embedded systems, and at least one medical device

Yes, this. Also, there is a saying in the security world, "Attacks only get better over time." I consult on embedded systems, and at least one medical device I work on is directly concerned with this issue. Embedded systems (cars, elevators, medical devices) consider a different threat model than, say, a server sitting in a data center. These poor devices often sit vulnerable, physically unprotected, and often they can be acquired on Ebay, etc. and "tortured in a garage" for months on end. Scary stuff. Good for me and my business, bad for all of us though.