And this distinction is important why?

All it takes is one compromised device, and there isn't a single company I've worked for (and I've worked for several bigger ones) that didn't have at least one vulnerable device network connected.