“The cost of finding and fixing a hardware security vulnerability at least doubles at each successive stage of the design lifecycle.”