Why Try the Finite State Product Security Maturity Model?