In A Production Security Checklist, I walked through what to lock down before opening the doors to real users. Security is a pass/fail gate: you either did the work or you're exposed. Performance is different. Nothing is "broken" if your dashboard takes four seconds to load. It just quietly loses you users, and nobody files a ticket for...