Don’t Believe the Hype: Understanding Security and Mitigating Risk