@gwynnion Ah, the general point one can agree with, but the final example (a "cost of quality" issue) could bear some discussion.
You won't get zero losses (to fraud, other crime, quality control failures, whatever) without spending an infinite amount on prevention. If you spend *nothing* on prevention your costs (of crime, recalls, whatever) will be rather higher than you might like, quite apart from the message you're spreading that the bad guys can do WTF they like and get away with it.
Getting the right balance is not easy. Spending *twice* as much on prevention as you're going to save on bad outcomes might actually be reasonable - you don't want to be *too* soft on the bad guys, for all sorts of reasons. [My own involvement has included discussions in council committees as to what point to give up spending money on chasing council tax debts and write them off.]
But yes, a factor of a thousand is probably going too far. They could perhaps drop that $150m to something like $1m and see what happens. Assuming, of course, that they don't already know the answer from historical data.