Cumulative damage is correct. Damage may at first only consume some of the ability of the protection devices, leaving the product more vulnerable to future events. Of course functionality testing will not reveal this. Once the product exhibits a failure, even with STM examination there's no way to differentiate ESD from lightning strike.