Exactly. I worked one place with competent DevOps, enough app-level holes to drain spaghetti, and willful ignorance from leadership. Compliance is a joke, and

Exactly. I worked one place with competent DevOps, enough app-level holes to drain spaghetti, and willful ignorance from leadership. Compliance is a joke, and real security is for companies who deal in it — they get to have the security experts, and companies get some security by chance.