AppSec consultant here. Most developers being unaware of OWASP is quite possibly the biggest failure of the AppSec community. OWASP isn't perfect, but it's the most visible,easiest to access appsec standard/community out there. If devs haven't heard of that, they probably know very little about securing the software they write and that's a massive failing of the entire ecosystem.