Why offensive countermeasures weaken our cybersecurity