> If security is not a priority, you will keep taking shortcuts. As with any other engineering discipline, it is about trade-offs. If you want to maximize "is

> If security is not a priority, you will keep taking shortcuts. As with any other engineering discipline, it is about trade-offs. If you want to maximize "is it secure?" over "can it be used by people safely?", fine. But at the end of the day I managed to have this delivered and used by hundreds of people, who are now able to go on to tell others about it, and no actual security incident. > How many people closed the tab? How people got dropped by the funnel matters little to me compared to the fact that there is a funnel in the first place. This is not a research project and no one is paying me to optimize this funnel. This is me building a tool to have a migration path out of reddit. Prioritizing having it available to people and other instance owners beats delaying it for a week on the basis of "some people will walk away because they object to the access request." Those like you can wait for another week, or they can go fork the code if they want, or they can even ignore the whole project and join lemmy directly. But the product is not for "those like you", so why should I be focusing on addressing your concerns over implementing the things that have been actually requested by other people?