How many times do we hear complaints from the community about open source shipping with insecure defaults, yet we expect security to be a premium feature we mus

How many times do we hear complaints from the community about open source shipping with insecure defaults, yet we expect security to be a premium feature we must pay for from SaaS?