In cyber security you may never know if a bad actor got access to your systems/data. The issue with not following good security practices is that you increase the risk of this happening.

Its like saying we should stop mandating vaccines cause the diseases aren’t around anymore. When you let down your defenses you end up with outbreaks that shouldn’t have happened and are harder to control.