Grounded AppSec discussion that treats new threats carefully and does not oversell the fixes.
The episode takes a practical look at application security when budgets are tight. It keeps coming back to the same tradeoff: cut the work that does not change outcomes, and spend more time on passkeys and other controls that shut down whole classes of problems.






