Hope Is Not a Security Strategy: Why Secure-by-Default Beats Hardening