It sounds like a reverse lottery of pain to me. If LulzSec looks at you, you get to spend millions beefing up security while your competitors do nothing.
...or, you know, be competent in the first place.
Yup, unfortunately this is true, and half-assing it because of this is what gets us onerous new internet legislation.