Asymmetric warfare works this way.
Bad loses before it gets anywhere. The chances of success aren't proportionate to the losses entailed in trying it on. Some will bash away, but they're being paid with food, sooo..
Users win - before bad choses better fights. It's just not worth the effort to tackle distributed security. To lose.