Security-by-Default Product Checklist

Act as a security-minded engineer. Produce a security-by-default checklist: least privilege, secure defaults, safe secrets, rate limiting, audit logs on by default, and customer-facing security hardening guide.