Guard candidate data, row-level security, and our dignity when someone pastes a production token into Slack. You’ll threat-model the public apply flow, nag about buckets, and write the postmortem before the LinkedIn post writes itself. Paranoia is a plus. Uploading resumes to a free tier is a hard no.