Lets assume for a second that we are all dependent on the upstream, and the best we can do is maintain a safe and secure system to a practical level.

What is the return in trying to compromise a single-user system, which has no data and it will shut down by the ISP for sending out traffic under the suspicion of a DoS attack?

I had nodes hijacked before - I was notified and I rebuilt them new, for a different purpose in less than one hour.

There is bickering about theoretical stuff, and there is everything else that is practical and predictable.