It's not like your street sam simply pushes a button, and he's suddenly a hacker. There are programs, which cost money. Skills, which cost Karma. Sacrifices in tacticals (if you're the hacker, you aren't the point man, and you aren't shooting people as well).
Granted, it's not a huge investment, but it's still an investment.
It's also not like your average hacker just gets Wired 2, or Synaptic 2, installed on a whim.
It's still far easier to go VR and have minimal investment.
Yes, at the high end, a tricked out technological being can equal a straight up hacker in VR.
But take the points that tricked out being spend on all the stuff that got them there, and put them in the hacker, and he's better again.
If you're really concerned, I think simply stating that your AR IPs are equal to your meat IPs-1 (min 1) makes a quick easy fix. Then 1 ip (base) = 1 ip. 2 ip (minimal investment) = 1 ip. 3 ip (Wired 2/Synaptic 2) = 2 ip (less than VR). 4 ip (Hardcore) = 3 ip.
So then a hardcore sam can still be a pretty badass AR hacker, but the VR guy will still beat him.