No, it is due to the game theoretic phenomenon called "The Attacker's Advantage" which is usually interpreted to simply mean "An attacker has to only succeed on

No, it is due to the game theoretic phenomenon called "The Attacker's Advantage" which is usually interpreted to simply mean "An attacker has to only succeed once, defenders must succeed every time." but in general refers to the strategic landscape of infosec. Frankly, the thought of "Actively Coming At" infosec threats is personally appalling. Feelings aside, you couldn't "actively" "come at" APT actors from the future with unknown techniques, and the way to "actively come at", so to speak, entire categories of "cyber threats" would be to fund detailed white box security testing on your IoT devices or VoIP handsets, for example. Much cheaper to oppress your workforce. At least that will shorten the checklist. Worst case scenario, you can catch the next wave of offshoring if you push it too far and they unionize.