These things are not really mutually exclusive. Defense in depth. Getting more information on building defensible software does not preclude the need to have someone knowledgeable try to rip it apart afterwards.
Or maybe more succinctly: they are incentivized to find SOMETHING quickly, rather than EVERYTHING.
I think it can help if the testers are internal and not quite under the same time pressure / engagement limits though.