It's not a forgone conclusion, but from a defensive perspective the threat model is more sophisticated than you're assuming.