> 'the bad guys' taking into account that none of them have these kind of resources

State actors definitely have these resources. USA, China, Russia at a minimum. I definitely feel the angst against the effort it takes to protect against bad actors. For example the adoption of https/ssl had a lot of worry about how expensive it was to encrypt server traffic. There were people arguing that it just wasn't worth it because the risk felt low, but it turns out the compromising was happening in practice. The ability to not have to guard against bad actors would make implementing technology a radically simpler endeavor, we just simply don't live in that world.