Sadly the idea that some set of people won't have been dumb enough to make a fundamental security mistake is almost never useful. Security is too complex, peop

Sadly the idea that some set of people won't have been dumb enough to make a fundamental security mistake is almost never useful. Security is too complex, people are too prone to overlooking aspects other than what they're working on, and the likelihood of a group of developers or researchers spotting a flaw in their own work doesn't scale even close to linearly. It's a bit like presuming no-one needs prose copyedited because they'll pay attention - you'll overlook some mistakes in your own writing because you see what you know must be there, not what you actually typed. Assuming people have written secure code because they're the kind of people who wouldn't make a mistake is a sucker bet.