Security as a Value, Not a Cost