Let's assume what he says is true. Then the managers of those engineers are incompetent and their managers also. If you hire people who do this sort of thing, a

Let's assume what he says is true. Then the managers of those engineers are incompetent and their managers also. If you hire people who do this sort of thing, and you don't even notice, then the problem is yours. There's no scapegoating here. Still assuming this is true: If a few rogue individual engineers can do this, imagine what else could be lurking in that codebase.