But we should not just allocate resources for the rule and ignore the exceptions, because then this is where our enemy would decide to target us. They probably still will, eventually, since the chance of detection is less. But not as long as they think they can just use who they've mostly got now.
We can slow them down a ton, just by focusing on the rule, and hope we can use the time to wipe them out. But it is very risky if we completely ignore the exceptions.
Profiling is a single tool in our arsenal against threats, but it is an effective tool, and we shouldn't put it on the shelf in the name of political correctness.