Insecure Design - The Fourth Item on the List

The fourth item on the list, which is insecure design actually caught me a bit by surprise. I think that's brilliantly brought out by the log4j example that you gave. So they're just brought us right back into thinking about how we do logging and thinking about who might use our logging frameworks. It also impresses on moving just beyond shift left, understanding where it all starts when even the discussion starts.