Yep, this is very well put and tracking on the same page as what I was thinking too. I've done contract work for a bunch of small businesses (1-50 dev team siz

Yep, this is very well put and tracking on the same page as what I was thinking too. I've done contract work for a bunch of small businesses (1-50 dev team sizes) and the amount of bangers I've seen are quite high. It's a whole different world when the expectation is your source code is private and the code has been been around for 2-10+ years. Committing secrets is pretty common (sometimes accidental, sometimes on purpose) but it goes way beyond that type of thing. There's a whole culture around the app being private. Survivorship bias is definitely real. Also "given enough eyeballs, all bugs are shallow": https://en.wiktionary.org/wiki/given_enough_eyeballs,_all_bugs_are_shallow https://en.wiktionary.org/wiki/given_enough_eyeballs,_all_bu...