In my tiny stupid brain I always have the idea that every developer cares about security practices as much as they care about their “product”. So I need to remind myself that those are in practice 2 completely different areas and most of the time security is an afterthought. That’s why I find funny to read the FOSS/linux bros so exited for finding malicious code
