> But if I'm a huge tech company, I can afford a lot of time and resources too, Can? Sure! Would? Security is one of those things that most people say they ca

> But if I'm a huge tech company, I can afford a lot of time and resources too, Can? Sure! Would? Security is one of those things that most people say they care about, but they are really not willing to pay for. Big companies have resources, but they are also in the business of making money, so they will put most of those resources to work on features that produce a ROI. Security is a huge cost center, and even when taken seriously it will be pursued only to the degree that it addresses/mitigates risks enough to conduct business.