it definitely helps to motivate some people to consider security as a functional requirement