'tptacek is right, for the most part. Regardless of what issues may or may not have been found, most developers don't think of security at the start or "bake it

'tptacek is right, for the most part. Regardless of what issues may or may not have been found, most developers don't think of security at the start or "bake it in." We've been trying to make it incredibly easy to do that, and our customers love it, but it is definitely not the norm. Hopefully one day it will be.