You are right in that security is a trade-off, but a security vulnerability should be considered almost as a failed system from a business perspective imho, bec

You are right in that security is a trade-off, but a security vulnerability should be considered almost as a failed system from a business perspective imho, because sooner or later it will turn into one. If you architect your systems to fail when not secure, you should detect the problem (and fix it) even before going live in production. It’s the fail fast, fail early strategy.