Why the fuck are we listening to security advice from people that have never found a bug or exploit in their life? Stick to talking about how to “manage people” instead of pretending you know the first fucking thing about reviewing code or finding exploits.