Your point about late surprises is a good one, though, and we plan to make sure that we have considerable input from Apps and Sec where relevant very early in the process.
That is clearly the important thing. thanks, john