The 4 starkest NCSC takeaways – and why it matters