But it is literally the PM/PO's job to establish and prioritize product features and timelines. If security is a priority, then it should be communicated and pr

But it is literally the PM/PO's job to establish and prioritize product features and timelines. If security is a priority, then it should be communicated and prioritized appropriately instead of being always set back in favour of shiny new features, as it often happens.