I think its generally true. attackers have to get it right only once, where as defenders have to get it right every single time.