A common analogy is to think about traffic lights.

If you run a penetration test, asking an individual to run a red light. You will achieve near 100% success.

However, when the traffic lights change actors’ behaviors to stop (at some probability such that it results in less collisions), most actors will stop according to the traffic lights.