Unfortunately the machines that get infected are not fully controlled by us but they get networking and internet from us (space rental in the building), so we isolate them as much as possible and we black hole all the bad traffic on the router level.
Our machines all have EDR and strict security policies. Not much gets past that.
I don't hold it against them. They have their hands full at the moment with DDOS attacks. The admins are barely able to keep the place running. The beauty of federation is that we can pick and choose where to sail from.