Cybersecurity Theater vs. The Real Thing