I reject the argument that Valve had it coming since they didn't take the time to secure their network beforehand. There are almost always going to be holes in the security of any system, especially digital ones (since they have a larger surface area to consider), so blaming the victim of a break-in implies that everyone should just resign themselves to being hacked sooner or later. Valve surely made at least some efforts to secure their systems, but even if they did not, that would not justify the morality/ethicality of entering their servers without permission.
> I reject the argument that Valve had it coming since they didn't take the time to secure their network beforehand.
I think the suggestion was that the time taken to secure their networks shouldn't be counted as "damages", just something that needed to be done regardless.
My point is that re-securing their network does not seems like a financial damage to me. If they had known about their vulnerability beforehand, I'm sure they would've spent the time and money to fix it then.