You are your brand. If your homepage gets turned into a billboard for goat.cx you are owned in more ways than one...
There is really no point in us discussing this further. We have dramatically different assumptions on the importance of security and the value of a company's image/reputation.
In all of the above cases I would consider security while creating, but I wouldn't do a lengthy pen test while trying to get the product out there. Of course that's also dependent on your target audience.