But the long-term plan is, that the attacks become more expensive, because it would cause companies to stop having insecure systems (and up the product chain, e

But the long-term plan is, that the attacks become more expensive, because it would cause companies to stop having insecure systems (and up the product chain, e.g. Microsoft would have to patch Windows or suffer losses). Same as with spam - the simple solution is that spam (mail/email/calls) are charged to the operator/provider - I can assure you that a solution would instantly appear whereby the providers would take great care about blocking spam at its source. The status quo in both cases is just to "solve" (but not really) the problem with the cheapest, shittiest possible solution.