Why would you assume that the same capability could not be used to harden systems?

Addressed in the source, but there's an asymmetry favoring the attackers. They only have to find one exploit once. The defenders have to be perfect all the time.