I believe that's more of a goal rather than a need. Even if 20 million tokens are not sold, development and delivery of the security services would still be taking place.
i believe this 20m is too easy for this one, since this one's backed by well known names. This one is one of it's kind, so i expect hacken to atleast surpass their 20m target.
I'm also on the same page, I think 20m will be a lot easier, As you said this is the first who caters White Hat Hacker industry. So this might be another bomb that will hit the exchanges. Let's be positive and hope for the best for this one.