Microsoft’s security chief seems to suggest that patching holes is a bigger problem than having holes in your systems in the first place, due to laziness among hackers.