Security vulnerabilities are less about programming ability and more about rigor.