Today's complex tech stacks can expose retailers to risks well beyond the payment systems that traditionally receive the most security attention.