“In a nutshell, we are shocked by cybercrime, but also expect to be shocked by it because we expect it to be there, but - confusingly - we appear to be shocked if we are not shocked (if we don't find it)!”