‘We need to be more imaginative about cybersecurity than we are right now’