The marketing emails are alarming. The actual threat is real but boring. Here’s what your SMB should do (mostly nothing) and what you should plan for.