Why we don't actually know whether retail theft is a big problem