Sure, but that's why we have layers of security so the attacker has to be lucky more than once and it gives the defender (theoretically) a better chance of gett

Sure, but that's why we have layers of security so the attacker has to be lucky more than once and it gives the defender (theoretically) a better chance of getting back in the game with the use of intrusion detection systems etc. The problem is, I guess, partly that people find it hard to motivate spending time and money on the inner layers (before it's too late). (not saying that it's easy or that the attacker doesn't have an advantage)