Your old pal Modus happened to be slotted in for a talk last-minute at GrrCon this year. I intend to write some articles to capture what the talk was about and why it all matters, but the tl;dr is that cost isn’t always a factor when looking to be secure- if you’re willing to put in the elbow grease you can be a lot better off from a risk mitigation perspective than you would have otherwise.
It probably won’t take the same shape as the talk (As I think I want to talk about some of the fundamentals I just kind of assumed people knew or could get at), but it should be similar content. Stay tuned.