Security and Testing Are Not Optional