Education, experience, diligence. I'd expect that of anyone basing their livelihood on delivering production systems. Secure out of the box is nice, except tha

Education, experience, diligence. I'd expect that of anyone basing their livelihood on delivering production systems. Secure out of the box is nice, except that when the boxing is done by others, and delivered to under-informed, unexperienced people. It's too easy to npm yourself a "full stack" or just pick a Docker container with full stack on it, then place it on public inter-web... there are dangers to be had, and others can save you. It's up to you. And yeah, the click-bait titles including the word "hack" are laughable.