Secure by Design, Secure by Default