CISA’s call for increased cybersecurity incident reporting is driven by genuine concern, yet striking a balance between transparency and practicality is key.