Why is fear-mongering such a popular security sales tactic?