I was an employee of a company providing security services. I can attest to that company being filled with generalist programmers. None were trained in securit

I was an employee of a company providing security services. I can attest to that company being filled with generalist programmers. None were trained in security principles. None were security experts. And there was no security review.