Canada's tax revenue agency tries to ToS itself out of hacking liability

given that there argument for not being liable is leaning on the claim that they use advanced security to ensure hackers wont get there way. and you can proof its false.

cant you sue them for this?