I agree: the main problem with security vulnerabilities is that your users' data gets leaked and it blows up in the media. If you just lose some money, you can

I agree: the main problem with security vulnerabilities is that your users' data gets leaked and it blows up in the media. If you just lose some money, you can budget for that right next to the risk somebody throws rocks in your window or the risk that somebody steals the company car.