Comment by _joel

That seems like a culture issue rather than an appsec issue?