## Atomic Insight [Opinion, single source]: @levelsio argues shipping fast and having zero security floor aren't the same thing — you can't have both maximum speed and perfect security, but a cheap floor is available regardless of speed. His concrete floor: use parameterized-query libraries (PHP's PDO) to close off SQL injection by construction rather than by discipline, and pay for periodic third-party security audits rather than skipping review entirely. Nick Groeneveld's framing sharpens the tradeoff: "shipping fast means you skip certain things and do some other things just right" — the skill is choosing which few things get done right, not attempting either extreme. [Unverified: no data on how much audits cost or catch in practice — presented as the author's personal practice and recommendation, not a benchmarked claim.] ## Cross-Domain Connections - [[SaaS Defensibility Beyond Code]] — a related claim about what AI-accelerated shipping doesn't erase: that note argues customer trust/data/network effects remain durable moats even as code gets cheap to write; this note argues a security floor is one of the things that must still be deliberately engineered in, not automatically inherited from shipping fast - [[Dont Build Structured Data by Smashing Strings]] — the general principle behind this note's specific practice: parameterized queries close off SQL injection "by construction rather than by discipline" because they never let user input become query syntax ## Source - [[I ship things fast.md]] — @levelsio, X, 2024-10-22 — https://x.com/levelsio/status/1848761596744774050?s=12