[ryanmccullagh]

Not getting time to do security because we need to ship v1 is a decision called by Product

[neilv]

If you know of a developer who would've done responsible security, but was pushed to ship instead, against their protest, I'd be happy to hear that.

[ryanmccullagh]

In my experience, Product is always the first one to suggest cutting corners.

[neilv]

Part of the job of Product is triage on all sorts of things.

But I don't think there's hardly any developers who would've done something securely but didn't because Product said no.