Why Defencive-Only Data Investment Is a Strategic Blind Spot