I guess that catch is right........ it depends on the attack vector?

Three shots and you're out, is different from a hash download and all the time in the World?