>Probably if you are running MS at this point, the best security is to not be big enough that anyone would want to break in.

Not so, unfortunatly. A tactic is to hack into small systems and use those as a starting point to hack other systems, making them much harder to trak down.