When Do You Quit Security Testing and Ship the App?

So on a lark I contributed to a thread in comp.software.testing knowing I could be quoted in an article. Well, I was. It’s over here.