Security Lessons We've Learned (So Far) from COVID-19