Security by design can’t be just a best practice it has to become a fundamental part of software development.