That poses an interesting question. They could go all out and spend tens of thousands on security. But at what point does the math not add up, and they are spending more per year than their losses are on average? At that point, should they just let it happen?