I'd venture to guess this is almost a natural law. Look at the pathogen/organism relationship in life. A small attacker with low overhead can cripple a large

I'd venture to guess this is almost a natural law. Look at the pathogen/organism relationship in life. A small attacker with low overhead can cripple a large complex organism. That's been evolving for billions of years without resolution. In essence, I imagine that security vs cost is an exponential curve with security being the independent variable, and cost the dependent variable. At the lowest levels, this is great because there's some very easy and cheap fixes to get large gains in security, but at the high end, each incremental gain increases in cost until it reaches beyond the realm of feasibility. Air gap all your computers? Cool, you just killed productivity which massively increased costs. Actively supervise every user? There's some niche systems that probably require this level of security, but it's rare. Even then, I don't think such a thing as perfect security exists.