Security and cybersecurity has become familiar to everyone. Nevertheless, security is still something that often denoted as not applicable when companies are developing or operating programmable electronic safety systems. In this fast abstract we try to point of some of the reasons to why it is like that, and discuss the problems by both believing there are no reasonable foreseeable security threats, and by believing that every thinkable attack can hit you. We also describe how we as consultancy try to address security in safety projects, and how guidance address the challenge. Finally, we point to the role of system owners that manage to set up clear expectations to include and integrate both safety and security.