Yes, but that doesn't require rendering performance or anything like that, but absence of security problems.

You can't justify a requirement for a minimum level of performance or some capability. You can justify a requirement of a guaranteed absence of security bugs, provided that that's a standard you impose on yourself throughout the system.