Most Internet companies don’t build products with security in mind.