People who think defending networks is merely a matter of choosing not to get hacked have clearly never tried to do it.