appsec

… and those decisions are sometimes rooted in "we don't have the people and/or money to spend on a new development in this module."

And everyone else is stuck either accepting that or spending the resources to ameliorate the situation. :/