Security bolted on at the end isn't security — it's a patch job with a deadline. The cost difference isn't the fix, it's when you found the problem.