> There are lots of programmers out there who do a fine job, they are just clueless about security.
Yeah, there are lots of mechanics out there who do a fine job. They are just clueless about breaks ;)
Stupid analogy aside: If you as a programmer who develops stuff for production are not aware of rules like "NEVER EVER FUCKING TRUST ANY USER INPUT" then you're just wrong for the job.