The core value of honeypots lies in "early detection" and "low false positives," because normal users almost never access the decoy systems, so any contact is worth vigilance.