Sometimes there has to be a trade-off between user satisfaction and security. If you make a process with too much friction, it might be secure but you'll get u

Sometimes there has to be a trade-off between user satisfaction and security. If you make a process with too much friction, it might be secure but you'll get user churn. Plus a lot of end users are straight up idiots, making something too secure means a lot of them won't be able to use it. But that said the only time I've seen insecure coding in the wild is the endless blog spam on sites like medium etc.