Which statement best describes the purpose of secure software design?

A. creating architecture and components that reduce attack surface and enforce security principles B. designing only the logo C. skipping architecture review D. adding security only after release