“You need to figure out which platforms your users are using and what applications they have built on top of these platforms.”

Transcript evidence from Michael Bargury -- Low Code / No Code Security and an OWASP Top Ten.