I worked in a etablished PHP shop that only worked with middle sized to big companies. There was no security other than the default options shipped with the use

I worked in a etablished PHP shop that only worked with middle sized to big companies. There was no security other than the default options shipped with the used products. I guess it's less about startup culture but more about bad culture in general.