genuine question:
why does security usually become a priority only after a product is almost ready to ship?
is it lack of time, lack of tools, cost, or simply because it's difficult to quantify the risk?
would love to hear from builders who've experienced this....