Security should never be treated as an afterthought. For Canadian projects, PIPEDA compliance, data residency, and secrets management should be discussed from the very first conversation. Another useful tip is to ask for Architecture Decision Records from previous projects. They reveal how a team evaluates trade-offs and chooses the right technologies based on project needs rather than simply following trends.