> can be safely deprioritized until your app gets complex enough to need it I'd accept "until your app looks like it might leave proof-of-concept classificatio

> can be safely deprioritized until your app gets complex enough to need it I'd accept "until your app looks like it might leave proof-of-concept classification". And always be mindful of how quickly PoC code can magically end up needing to be production ready overnight or worse being in production before it is... Retrofitting security can be a nightmare, one that can be so easily avoided.