Firms with exposed IoT have a higher concentration of other security problems