I disagree. Yes, a lot of them are caused by incompetence to some extent but we should use processes where the harm of incompetence is limited and where we take

I disagree. Yes, a lot of them are caused by incompetence to some extent but we should use processes where the harm of incompetence is limited and where we take quality and security seriously. Blaming it on individual incompetent developers is unhelpful when the industry allows this and encourages it since it increases the short term output of new features.