Weighing the Risk: The Cost of Skipping Pen Tests