Here is where we should be solving security problems whenever possible: at the beginning. This may seem obvious, but our actions as an industry do not reflect that we have learned this lesson.