Programmers should do a lot of things that most of them do not do. The statement was "I would expect..." and I replied that it doesn't make sense to expect tho

Programmers should do a lot of things that most of them do not do. The statement was "I would expect..." and I replied that it doesn't make sense to expect those things because the vast majority of programmers don't know or care about security at all. We still see the same trivial SQL injections being written again and again on today's web, often by 20+ year programming "veterans".