When Confidence Becomes a Cyber Resilience Risk