“They typically don't use the same security controls in Dev and Staging.”

Transcript evidence from Paul McCarty -- The Burrito Analogy of the Software Supply Chain.