Isn't that because they are aiming for the biggest targets. Anything that became similarly successful would be similarly targeted.

Being small enough that malicious actors are not interested in you is beneficial, but by definition it is a solution that cannot be widely adopted.