If they aren't qualified to design with least privilege, what are they qualified for, beyond maybe cat videos?
I've spent about half my professional career finding vulnerabilities in the software of developers who are convinced they're "qualified to design with least privilege".