Mythbusting: How Good Security Practices Complement Developer Productivity