A cybersecurity warning with no breach attached: when protection is treated as a later task, technical debt, uncertainty, and attack odds tend to rise together.