> it's theoretically possible (though not necessarily realistic) to have good enough security to resist targeted hacking by the KGB It is possible to have a se

> it's theoretically possible (though not necessarily realistic) to have good enough security to resist targeted hacking by the KGB It is possible to have a security level where the cost outweighs the benefit. If the KGB really wants to go all out, they could buy employees, burn zero days or even hold sysadmin families hostage - but that would be extremely expensive and risky and they'd really need a big reason to go that far. If your password is "admin" or "solarwinds123", on the other hand, the biggest expense is probably the employee time spent laughing in the coffee room. I agree that it is vastly expensive to have a security level high enough that the KGB realistically can not take over your network, but it's far cheaper and more realistic to have a security level where it's not worth the expense.