Susan Landau is Bridge Professor in Cyber Security and Policy at the Fletcher School of Law & Diplomacy and the School of Engineering, Department of Computer Science, Tufts University, US. This research was supported in part by funding from the William and Flora Hewlett Foundation under grant 2018-7277; any errors are the responsibility of the author. For correspondence: <mailto:susan.landau@tufts.edu>.