Why remote workers are an underrated security risk for small businesses