I'm just imagining each of those individual issues sitting at the bottom of a Jira backlog. One thing that causes them to be prioritized where I work is that i

I'm just imagining each of those individual issues sitting at the bottom of a Jira backlog. One thing that causes them to be prioritized where I work is that if they come up during a yearly review, you can't ship your app. Overriding that "stop-ship" order requires C-level approval. Because without a specific exploit, it might be hard to convince a PM to move those up in the backlog.