"use Open source software", "add logging", "set all pages to HTTPS" and follow a "top 10 list of the most critical security threats"
Sad state of things.
The concept of having your work done by "Full Stack Developer" will not be nice for opening up potential security holes, in my opinion.
Additionally, I don't think there exists a real "Full Stack" dev, and I'm not alone in this opinion; click anywhere:
https://medium.com/swlh/the-full-stack-developer-is-a-myth-4...
https://news.ycombinator.com/item?id=10182936
http://andyshora.com/full-stack-developers.html
https://frontendmasters.com/books/front-end-handbook/2017/pr...
https://vitamintalent.com/blog/the-myth-of-the-full-stack-de...
https://techcrunch.com/2014/11/08/the-rise-and-fall-of-the-f...
https://www.propelrr.com/blog/ux/full-stack-web-developer.ht...