The crucial thing people tend to miss: Attacks scale. They can be automated. Your blog may not be worth the trouble hacking it, but hacking thousands of private blogs and abusing them for spam and only having to work out the attack once is.