Mostly true but there is largely a massive amount of negligence in the tech industry, with a particular emphasis on shops that prioritize shipping “features.”

For every engineer that takes security seriously, there are 99 engineers that don’t. It’s an uphill battle.

Source: 25 years of experience.