The problem is that security is often the feature that has the biggest gap between how much the end user cares about it and how much the IT buyer cares about it, which makes it perfect as an upsell.