internet security is bad yes, but having bad security doesn't mitigate the crime of trying to break in.
If we accept that line of reasoning we get to a very weird place where we start putting the onus on victims to protect themselves not perpetrators to regulate their antisocial behaviours.