Nobody care until there’s an incident or security vulnerability, something doesn’t work based on some PMs assumptions of how it should work.
The question to me becomes whether the PM -> engineering handoff outdated? Should they be the same person? Does it collapse to one skillet for this work?