Yeah, "defender's advantage" does not apply in the wacky world of computer security.