On cybersecurity, rely on third parties at your own risk