It's harder to publish papers that attack a system that is already secure.