Another one for the attackers advantage. Defenders often move much, much slower. Bureaucracy / process, plus risk in breaking unintended things.
My main viewpoint is that attacking is verifiable and defending never will be. So AI attackers always have an advantage.