Arguments Against Security Awareness Are Shortsighted