I’m sure there was at least one engineer that was like this is a bad idea and everyone laughed at them. Having a discussion about bad security practices doesn’t

I’m sure there was at least one engineer that was like this is a bad idea and everyone laughed at them. Having a discussion about bad security practices doesn’t change anything. Companies just don’t care about security. It’s why we see major companies hacked time and time again. Even if the team agreed it was an issue, a project manager is never going prioritize security work over new features.