Webdevs still security ignorant. Actually just ignorant. Not sorry to say that because it's beyond true.