There is a cost to attacking these systems, but it's fully finite. It's always possible to go around the world with some sort of SWAT team and take down every single Bitcoin node or Ethereum node. This just reinforces what we said before that it's so difficult to reason about these systems because the set of actions that are available are usually a lot larger than what you would assume.