Dean Valentine comments on Models finding software vulnerabilities is not the primary source of cybersecurity risk