It’s harder to have a loop to ensure you are defending all possible attacks?

I guess the loop is you need to attack yourself and fix. But attackers only need a single opening.

Finding all possible attacks and patching them against yourself is inherently more expensive?

Your strategy can’t be patch AFTER an intrusion. Only to build a hardened environment from scratch and be ready in advance.