Consumer security hangs in the balance