I’ve been a developer in a security champion like role for many years now. I’d first like to say that developers are casually interested in security and will tr

I’ve been a developer in a security champion like role for many years now. I’d first like to say that developers are casually interested in security and will try to do the best they can. I’d say the interest in security is about the same as in technical debt. The same kind of risks are assumed and the same difficulty in saying no to product owners also exist.