If Your Only Tool is a Hammer. Scanners v. Consultants vs. Crowdsourced Security