Of course. The risk of a security incident in my two years at a company is pretty low, the time savings are enormous, and there are no rewards for doing a bett

Of course. The risk of a security incident in my two years at a company is pretty low, the time savings are enormous, and there are no rewards for doing a better job at code review than rubber stamping or waiting to get the proper credentials rather than copy and pasting them. Debugging with customer data or passing it to 3rd party vendors also lets me get tickets done a lot more quickly, improving my Scrum scores. I am a slave to incentives. There is no incentive to do things properly at the individual developer level.