Frameworks operate at the application layer, providing security features like authentication, authorization, input validation, and protection against common attacks (SQL injection, XSS, etc.). While hardware, OS, and web servers have security roles, frameworks offer application-level security that developers directly leverage. Option C is correct.