Why cybersecurity needs an api first mentality