I'm not sure about the point you're trying to make. The famous reference is about Abraham Wald looking at all of the common places that planes didn't get shot.

I'm not sure about the point you're trying to make. The famous reference is about Abraham Wald looking at all of the common places that planes didn't get shot. That's where you put the armor. And it was really effective. (there's another good one about helmets). Maybe you're saying, yes it's embarrassing to have some static content hosted on some random cloud instance get compromised - but that's clearly not fatal. You have finite resources to devote to security, so pick your battles. But I think you're saying something else. I don't quite get it.