> SWE's are the worst about security, I swear most are worse than the average person when it comes to security practices.

My experience is completely different: many software developers are rather paranoid with respect to security, and have quite a good (though far from expert-level) knowledge about security. It's rather that many software developers are quite hostile to security practices that are mostly "security theater" and obstructs them in doing their work.

The following Reddit post

> https://www.reddit.com/r/NonPoliticalTwitter/comments/1e8do2...

and the top answer

> https://www.reddit.com/r/NonPoliticalTwitter/comments/1e8do2...

describe the mindset that I observe rather well.