The big problem with bad cyber analogies