Yes. I'm just pushing back on the term "budget" as it implies conscious allocation of resources to some end, in this case security.
I prefer simply reporting on network dynamics such as mining revenue, energy expenditure, and 51% attack costs. Descriptive measures, not prescriptive.
