What I'm saying is how about we leave it up to the discretion of the developer to know whether the code their working on is valuable enough to be worthy of secu

What I'm saying is how about we leave it up to the discretion of the developer to know whether the code their working on is valuable enough to be worthy of security concerns. I personally feel that a lot of code written by mere mortals is not, and that's not simply anecdata; it is informed by nearly 30 years of experience working on software professionally. This is an especially ridiculous argument to be having in a world where vast numbers of programmers use Copilot day in day out on their corporate codebases, with managerial approval I might add, because productivity. The fetishization of security for ordinary code is ridiculous imo.