People often forget that Threat Actors (TA) are the ones keeping the infosec alive. They are doing a good job of scaring people into implementing actual security protocols and thereby improving everyone's security posture. The whole infosec would collapse without TAs, let's not forget that. They create jobs.
That's right. They also create jobs for police though, and now German police is doing theirs
This is the “Broken Window” fallacy[1] which was explained by Bastiat.
[1] https://en.wikipedia.org/wiki/Parable_of_the_broken_window