Comment by Kinrany

It's clearly true: it's cheaper to prevent vulnerabilities than to find and exploit them.