I think it fits the idiom of "aim for the stars and you'll land on the moon".

If you are the kind of company that has a focus on all aspects of security, and assumes a sophisticated actor is attacking, you will have a better chance at defending against unsophisticated actors.

If you plan your security around only defending 'less-sophisticated' actors then you might quickly find one slips through the cracks.