But by not having a checklist you avoid that your blind spots get exposed.

Why would you want to prevent your development team from learning about their blind spots?

	▲	dgb23 2 days ago \| parent \| next [-]
		I tried to make a joke about the tensions of security and accountability.
	▲	dylan604 2 days ago \| parent \| prev [-]
		So you can move faster to the next features obviously. Refactoring for secure code is time consuming, and clearly wasted cycles as the code is working. /s