You’re paying for security—but is it really protecting you?