Secure by Design: A Guide for Manufacturers (CISA) DF-9: Replace hardening guides with loosening guides

Instead of hardening guides that customers often never find and that can point attackers to weak features, ship secure by default and provide loosening guides that explain, in plain language written by security practitioners, which changes a customer can make and the business risk of each, so that customer executives make the trade-off.