Offering web development with an F security grade is kind of ironic.
I always find it a little ironic when a company offers web development services, but a simple scan of their own website gives them an F for security.
Especially when many security best practices are quick and easy to implement. They should be a standard part of development, not an option.
Security is part of building a good product.