Cybersecurity Threats Fail to Justify Privacy Losses