Why cybersecurity-related device recalls should be treated as real operational events, not just IT issues.