To answer your question, I think it's a ridiculous comparison. Anybody who actually understands MAD and the triad of the nuclear deterrent and second response, etc., understands you're talking about a completely different intellectual construct. Notwithstanding—and I've read the piece, I think it's a decent thought piece and there's a lot of value to it— that comparison is a distraction, at best.
What we're talking about in terms of actually having the capability as a deterrent...I'm not convinced that's the case. The capability by itself really should be designed to prevent certain actions, to mitigate the impact on certain actions, to be able to subsequently respond and recover. In the cyber domain, if you don't have that continuum, then you're incomplete. Missing one stage of that, which includes an offensive capability to proactively understand what the threats are, to deal with them, to prevent them, to mitigate them, then you remain vulnerable.