Fifteen years ago the principle security worry in running a web application was that some "script kiddy" would break in and deface your homepage.
Today the threats are much more real. Ransomware, cryptocurrency miners, even state actors.
An enormous point of weakness in modern software is the supply chain - many projects now have thousands of nested dependencies.
Most of those dependencies represents at least one human being who can be threatened with a crowbar and forced to ship an exploit, which can then infect vast numbers of production applications.
Today the threats are much more real. Ransomware, cryptocurrency miners, even state actors.
An enormous point of weakness in modern software is the supply chain - many projects now have thousands of nested dependencies.
Most of those dependencies represents at least one human being who can be threatened with a crowbar and forced to ship an exploit, which can then infect vast numbers of production applications.
So yes, for me this is a very real concern!