People often treat security as an extra feature. Except it doesn’t do anything. It’s not pretty. It doesn’t generate more sales. It may even inconvenience your users. Security is more like an anti-feature that eats up your development time. It’s…..its…plumbing. It has to be there. It has to be done right and up to code. And, if it fails….. le deluge.