The fact that your already compromised system is hosed is a lot less important than making sure that the other billion or so computers in the world don't get hit by the same attack.

Security is not, never has been, and never can be 100%. It's all risk management. There will always be failures. The goal is to minimize those failures and to prevent the same attacks from working twice.