Is Crowdsourced Security Safe? Hacker Power Without Compromise