Security Q&A: Sophos boss Steve Munford. Still won't hire virus writers.