Your city's public transportation system wants to develop a mobile application for ticket purchases. Create a hypothetical scenario discussing the design principles that should be considered to ensure the security of user transactions and personal information. Explain how these principles will be crucial in the development of security mechanisms for the application.