> once it's activated, you assume the target is compromised

I don’t think it’s helpful to think in such absolutist terms. Coal mine canaries died of natural causes. A canary is meant to prompt investigation (and heightened vigilence), not conclude it.