Hacker News Reader

True, but you'd be surprised how much you can tighten up a codebase by asking a heftier model to do a security review and suggest fixes.

At what point do people really know if it has been tightened up if they never look at the code?

That's the catch -- a team would need to care enough about quality, or don't at their own peril.

How does a PM know that the code has been tighten up by the offshore team?