> The attacker can get access to the sources via eg industrial espionage.

Isn't that an extra cost above and beyond what the defender has?