Normalcy doesn't matter. I think the point is that you're not going to get much sympathy if you leave your front door wide open, leave for work or better yet go

Normalcy doesn't matter. I think the point is that you're not going to get much sympathy if you leave your front door wide open, leave for work or better yet go on Christmas vacation and have no sign anyone is home, and then come home to find something's been stolen. Maybe a better analogy is leaving a laptop in your car overnight and leaving your car unlocked parked on a busy street. Obviously stealing is a crime and we shouldn't victim blame. But with a lot of software the business isn't much of a victim so much as their customers are, and there doesn't seem to be much incentive for companies pro-actively securing their software. You could argue in hindsight the developer would've been better off selling the vulnerability and/or data to the black market rather than reporting it.