True, but if it's critically underfunded everywhere then it's what we have now where it's just the cost of doing business and a risk you account for.

I would imagine most sites on the internet could be exploited by someone targeted and ultimately relying on the fact that their data/site isn't valuable enough to attack in the first place.