Do SaaS product developer consider security while building?

I am curious to know if SaaS developers consider packages security or dependencies security? I have talked to couple of devs and seems like this is mostly kept aside for the maturity stages of the product. Is this hypothesis correct? What do you guys think?