Fair point. I suppose it's about eliminating as many vulnerabilities and exploit vectors as possible, then deploying countermeasures and controls to mitigate the ones you can't remove. Putting a fanless machine inside a closed cabinet with a relatively noisy fan, or at least one with a large frequency spread, would go some way towards accomplishing that.