Of course, but there is a big asymmetry: For some systems there are a lot more people interested in hacking them, compared to those interested in protecting them.

But i guess it's also a matter of money, because a company could potentially balance that by throwing x times more agents etc. at it.