Your question is Handling Security Pushback From Developers. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Tell me about a time a developer disagreed with your security assessment of their code or service. How did you handle the disagreement, how did you influence the outcome without relying on authority, and what was the result?