While I certainly agree that security is a matter of tradeoffs, I have one nit to pick. "All of these companies have decided that the risk of losing this data

While I certainly agree that security is a matter of tradeoffs, I have one nit to pick. "All of these companies have decided that the risk of losing this data was worth the cost savings of not protecting against the attack. So far they all seem to be right (not even Sony went out of business after their massive breach)." "Went out of business" is not the right criteria for saying "they were right". The question is whether (the EV of) the cost of a breach exceeded (the EV of) the cost of protecting against a breech. It's probable that the delta between those two was not enough to put Sony out of business - they're a massive company with high margins.