“Malware code is often written very simply and quite securely, server administration isn’t nearly as good.”
(Peter Gutmann, professional paranoid, on Malware as a Service)