And what about all the none-"good" developers? There are also frameworks that do the sanitization for you (e.g. Rails IIRC), and novice developers coming from

And what about all the none-"good" developers? There are also frameworks that do the sanitization for you (e.g. Rails IIRC), and novice developers coming from those certainly might not be aware.