I've spent about half my professional career finding vulnerabilities in the software of developers who are convinced they're "qualified to design with least privilege".