Step 1: Manufacture a bunch of low-quality "good enough" codebases

Step 2: Turn around and sell security-as-a-service to the most profitable products