> a targeted/ongoing compromise.

Not to worry! Because XProtect and similar have such a narrow scope, it is unlikely to protect against targeted attacks anyway.