Post

Frameworks should come with secure defaults. It might increase the friction to have a working MVP, but c'mon, that's better than any security issue you might encounter later. LLMs are decreasing the cost of an attack. Frameworks have to assume they are analyzed and leveraging the default config