John Steven has a quote I quite like: "QA is making sure your software does what it's supposed to. Security is making sure your software only does what it's supposed to."

I think this is the lens the OP wanted readers to view this post through.