“You can integrate static analysis. build that in, you can do something else, and there's some engineering up front and there's some maintenance, but there's never enough time to do it all.”

Transcript evidence from Adam Shostack -- Think like an Attacker or Accountant?.