I'm really surprised to see you're being downvoted for this statement. You don't even need to have anything valuable in your company for security to matter bec

I'm really surprised to see you're being downvoted for this statement. You don't even need to have anything valuable in your company for security to matter because your customers' personal data is valuable to them, and by law you have to protect it in many places now. A security breach must be publicized, and that's a black mark on your company whenever anyone is considering using it in the future. It doesn't even really matter how big that breach is, or what data was stolen. But even worse, an unethical competitor might hack your data and erase it, leading to lengthy downtime or even permanently lost data. That's most a server-side focus on security, but even client-side there could be things that allow hackers to mislead or damage your customers. Libraries are updated constantly as old vulnerabilities are discovered and new methods of attack are invented. Leaving your OS or libraries un-updated is virtually guaranteeing that you end up vulnerable somehow. The idea that if you don't know about a security problem, you don't need to fix it... Wow, it's just mind-boggling to me.