Security considerations in low-code SaaS platforms