“Malware code is often written very simply and quite securely, server administration isn’t nearly as good.” (Peter Gutmann, professional paranoid, on Malware as a Service)