“Customers are now approving budget requests for equipment upgrades when they are framed as a "security risk," whereas requests framed as a "refresh" were previously deferred.”