While I agree that "security" cannot be provided by a checklist, I very much think that security checklist (among other checklists) is still important to keep a

While I agree that "security" cannot be provided by a checklist, I very much think that security checklist (among other checklists) is still important to keep around. If only for making sure you check for security issues that have slipped through before. Sure I rather put all checks "in code", as part of an automated test suite. But we all no that for some checks that's simply not possible/feasible.