We’ll get security when people decide it’s important enough. They say it’s important, but the evidence is people don’t think it’s important enough to pay for. If it’s important enough, vendors will pay attention to it. It doesn’t matter what people say if they’re not willing to spend extra for it, cash and cycles and memory and things like that.

— Federico Biancuzzi, Masterminds of Programming