A strong security posture is not a perfect security posture. It seems likely that someone will invest in security, get hacked anyway in a really sophisticated way, and feel that they wasted all that money.