states squander $670m ‘security votes’ annually