Only DevSecOps can save the metaverse