Does it matter?

"Security" and "performance" have been regular HN buzzwords for why some practice is a problem and the market has consistently shown that it doesn't value those that much.

Thank god most of the developers of security sensitive applications do not give a shit about what the market says.