I disagree. It is the onus of companies and managers to give developer enough time to figure this out. If they don't include it in their estimates, don't expec

I disagree. It is the onus of companies and managers to give developer enough time to figure this out. If they don't include it in their estimates, don't expect developers to put in their personal time to implement proper security.