> "The optimal amount of fraud is non-zero" [1] (wrt banking systems)

It's a bit like how each 9 of runtime is an order of magnitude (ish) more expensive to achieve, and most use cases don't care if it's 99.999% or 99.9999%.