Companies should focus on protecting data rather than fixing holes.