Submarine cable security is all at sea, and UK govt 'too timid' to act, says report