In a nutshell, yes. My issue is that software security is not taken seriously most of the time because features are more important than spending a little more

In a nutshell, yes. My issue is that software security is not taken seriously most of the time because features are more important than spending a little more time on code quality. The hacker is not the one writing buggy software.