Here's an interesting thought: what with the money there is to be made in security these days programmers that actually know everything there is to know about security will leave applications development.
There is a good chance that the lure of security consultancy $ is resulting in a degradation of the quality of the applications.
There is a good chance that the lure of security consultancy $ is resulting in a degradation of the quality of the applications.