Because legendary security doesn’t engineer itself