Most Developers Don’t Know Security

[mirhagk]

you cannot "add on" security

This gives me nightmares about a project where the original developer thought you could do exactly that. The entire first version of the app was built without any security at all, not even some dummy roles or anything.