Also a lot of devs who think if they can't see how to exploit something, nobody else will be able to. Honestly, the arguments I've had with people claiming tha

Also a lot of devs who think if they can't see how to exploit something, nobody else will be able to. Honestly, the arguments I've had with people claiming that their SQL injection isn't a problem ("it's in the middle of a clause" was a good one).