Nope, you've got it backwards :) If you really want security, it's something that no programmer should have to think about. Your language/framework/platform/API

Nope, you've got it backwards :) If you really want security, it's something that no programmer should have to think about. Your language/framework/platform/API has to provide it for free. Trying to make every developer a security expert is a laughable proposition. That's my conclusion after 15 years in the security industry.