Which is why security should be primarily a software development team offering high-quality, safe-by-default libraries and services. Instead of "you idiots fail

Which is why security should be primarily a software development team offering high-quality, safe-by-default libraries and services. Instead of "you idiots failed to consider authorization" it becomes "here are the onboarding instructions for our authorization system, and here's your language's client."