7 uncomfortable truths of Endpoint Security: A Sophos report