Net threat overstated, says security researcher