What are the biggest mistakes with security in Python?

I have a question about Python that may be useful for other people working with it too.

I am particularly interested in security and automation. I would like to compare approaches that people have actually used rather than just theoretical suggestions.

What trade-offs have you found between quality, speed, cost, and reliability?