I feel like your missing a third alternative:- You (are required to) treat your code as having to fulfill both functional requirements and declared non-functio

I feel like your missing a third alternative:- You (are required to) treat your code as having to fulfill both functional requirements and declared non-functional requirements, including measures of maintainability, reliability, performance, and security and (regulatory/legal) compliance.