Security is a property of the process, not a separate stage. Like architecture: when left implicit, it degrades.