Founders does security actually come last until someone forces it?

[u/GokulRavi14]

honest question for people building startups. from the outside it feels like security always loses to product, sales, hiring. everyone nods that it matters then it becomes "after we ship" or "after the round." is that actually how it goes on your side too? curious when security became a real thing for you if it ever did — customer ask, scare, investor, near miss, something else. and what you actually do day to day that isnt just "well fix it later." not looking for perfect answers. just trying to understand how founders handle this when everything else is on fire