Why Should Open Web Application Security Project (OWASP) Application Security

Why should Open Web Application Security Project (OWASP) Application Security Verification Standards (ASVS) Level 1 be considered a MINIMUM level of protection for any web application?

A) Most regulatory bodies consider ASVS Level 1 as a baseline set of controls for applications
B) Securing applications at ASVS Level 1 provides adequate protection for sensitive data
C) ASVS Level 1 ensures that applications are invulnerable to OWASP top 10 threats
D) Opportunistic attackers will look for any easily exploitable vulnerable applications