Just like beginner developers who never sanitize their input, there are also people who never validate their inputs. Just like exploitation of programs, there are people who exploit the behavior of other people, giving them input when what they really want to do is to run their code (buy the product / believe in the psychic).

Just like educating beginning developers in the important of security, we should educate children to sanitize their inputs, validate things they are told, think critically, and realize the code that others are trying to run on them.