Proposed reforms to Germany's 'Hacker Paragraph' aim to protect security researchers, but do they go far enough?