this isn't a startup tech problem - it's a startup customer problem. no customer wants to pay significantly more for a good or service to ensure that the company takes security seriously because they want the lowest cost.