Yes. Startups are deeply focused on revenue. Developing security for a product is considered "extra" and "nice to have", not essential. That goes double for ope

Yes. Startups are deeply focused on revenue. Developing security for a product is considered "extra" and "nice to have", not essential. That goes double for operations. I have never seen a startup actually practice security unless in preparation for an audit.