However, John was also aware of the potential risks involved. He knew that using unauthorized software could lead to security vulnerabilities, and it was against company policy.