Security is not a bolt-on afterthought