Perhaps we can modify that conclusion to say "We want these attackers to be able to succeed (although we'd also like them to be sloppy enough that they get caught)."

Can we have our cake and eat it too?