Is there an ideal circumstance or organizational structure or development process that could allow this to work - and perhaps that is simply necessitating a very large amount engineering and security/QA resources?