Comment by worewood

There is a tension, but it's between paying enough to developers to actually produce decent code or pay a 3rd-party to firewall the application.