“Because essentially it's an awareness document, and it's treated as a baseline. It's that starting point, and we can't emphasize that enough. This is a starting point.”

Transcript evidence from Andrew van der Stock and Brian Glas -- The Future of the OWASP Top 10.