What does it mean to build in security from the ground up?

Security researchers found a big hole in DeepSeek's security

U.S. Navy bans use of DeepSeek due to 'security and ethical concerns'

Can we get the benefits of transitive dependencies without undermining security?