[sfdcsecthrow]

This is not true. Heroku actually had a pretty decent security team. They have lost most of that talent though.