You take the analogy too literal. The idea is that the actions of the attacker can be agreed to be negative, even if security is lax on the victim&#x27;s side. You don&#x27;t say &quot;Welp, they were asking for it!&quot; and call it a day.