[Nextgrid]

The difference is that car theft is still prosecuted by police, where as cybercrime is not (unless you embarrass a huge corporation).

So the garage can have lower security because even potential thieves do a risk/reward calculation and the vast majority choose not to proceed with it.

Online, the risk/reward calculation is different (what risk?), so more people will be tempted to try (even for the lolz - not every act of cybercrime is done for monetary purposes).