Smart Cities Under Attack: Why it Pays to Think Twice About IoT Security