The funding round is a business milestone, but the security story is sharper: more money for controls that try to stop risky dependencies before they enter the build.