It's not a good analogy. Something is still on in suspend. Good you can control Linux kernel, but what about all other chips which may be an attack vector?

Except shutting down and hibernate are two actions the user can literally select from the same menu.