A tale as old as time:
Developer: it's hard to implement security features.
Security team: we won't be able to get them to do it, it's hard and takes a lot of time
Are companies like Pangea (https://pangea.cloud/) the answer? If we make it easier, is it easier for most dev. teams?