Security is ultimately a question of cost to attackers. Is their goal of “compromising your app” worth risking you noticing their (valuable, hard to create) ze

Security is ultimately a question of cost to attackers. Is their goal of “compromising your app” worth risking you noticing their (valuable, hard to create) zero-day and getting it fixed upstream?