Secure by design

Secure by design puts the burden on whoever is best placed to carry it, which is the manufacturer rather than the customer.

The argument is simple: one vendor making something safe by default is more efficient than a hundred thousand customers each configuring it correctly, and most of them will not. It has moved from a slogan to a regulatory expectation in several jurisdictions, which changes procurement.