Perfect is the enemy of good. And we don’t know what work they’re doing on the engineering side.

What if it turns out they detected this code was run by other people and responsible for 50% of the unauthorized access? Just because it doesn’t entirely solve the problem, does not mean they shouldn’t pursue all partial tactics.