Comment by Yokohiii

This is missing the point. If you want to run a software solution, application security still must be properly done.