I think that for the security check the project has special people or team members who are responsible for this area.
Holes in the protection will always, it is important to react extremely quickly to the threat and eliminate it as soon as possible.
But still, the release must provide the highest quality and safe product. Users primarily value security.