I think even "better best practices" should be something like this: Even in case we accidently violate some security rules (like open ports,...) the applicatio

I think even "better best practices" should be something like this: Even in case we accidently violate some security rules (like open ports,...) the application is still safe ?