FFS: Do security right the 1st time. That way you don't have some highly paid Sr. Dev going through your code pointing out all the places where you didn't parameterize your SQL or sanitize your inputs. Or worse, have that same vulnerability missed and caught by a black-hat.