>>/876746/
> but why every single enterprise device
because dear old Edith in Accounts opening an email attachment that spawns some PowerShell exploit is more realistic than Mr Robot using some 0-day against one of your servers.