“It's important, I think, that it sits close to the code.”

Transcript evidence from Mike Goodwin -- The OWASP Threat Dragon.