Tech changes do not impact attackers and defenders equally.

Good things do not all have the same properties - That’s mistaking an incomplete assertion for a complete one.

Cyber security is an attackers domain. Your security is typically because you are (were) not valuable enough to earn the attention of an attacker.

When LLMs make targeting you cost effective, you will have to spend more energy defending yourself. This means that you have less time to do other useful things, reducing your net utility, while increasing attackers utility.

Also - teams in these companies DO care, I have worked with them. The decision makers are regulated by the cadence of the quarterly share holders meeting. At that point things like safety are a cost center. Reducing safety spend while minimizing reduced time on site is rewarded by markets.