“…We would like to thank two anonymous reviewers, Andrea Canidio, Simone Giansante, JT Hamrick, Roberto Renò, Antonio Scala, Marie Vasek, Jiahua Xu, as well as the participants of the University of Innsbruck's Security & Privacy research seminar and the participants of the Workshop on the Economics of Information Security 2019 (WEIS) for their comments on earlier versions of this work (Saggese and Böhme, 2019)…”