How do you approach security?

Authorisation is enforced at the database level using row-level security on every table, in addition to the application layer. Secrets are kept in a managed store and never in the repository. Dependencies are pinned and monitored, and every input crossing a trust boundary is validated against a schema before it reaches business logic. These practices are applied consistently across every project.