Is it If or When we get hacked? Spend resources or "Things Get Complicated"