We've rebuilt our security scoring around the questions real users ask — not the jargon providers use.