I've yet to come across any tooling where i've said "yeah, i'd rather use this than run my code against your API and do the things I want to do".

Like nearly everything else in tech, security becomes much more impactful when the practitioner understands computer science, architecture, distributed systems etc.