Security by default is a design principle, not a feature list. An API is secure by default when using it correctly …