The problem is that Security Engineering is still treated as if it's a separate thing that is evolving. It's systems engineering, where security is a necessary

The problem is that Security Engineering is still treated as if it's a separate thing that is evolving. It's systems engineering, where security is a necessary feature that's being grafted-on after-the-fact.