Frankly, I do believe an alternative is to try to minimize long-term damage by being smarter about security and making sure hackers go for the low-hanging fruit

Frankly, I do believe an alternative is to try to minimize long-term damage by being smarter about security and making sure hackers go for the low-hanging fruit that will be easily fixed. For example, make a prediction market for where hackers will hit, and play with difficulty and incentive factors so that you control the game, rather than simply begging the opponent to go for bigger, better (worse) targets, which is what I assume is going to happen with the current course of action.