From SSL and role-based access to audit logs and global protection security is built in, not bolted on.
Automatic certificates on every site, HSTS-ready redirects, and modern ciphers out of the box no setup required.