Critical infrastructure insecurity - Why vendor obscurity will kick us in the teeth