“When you look for a certain piece of code and you don't see the best practice being applied, then it means there's something wrong happening there.”

Transcript evidence from Elie Saad — OWASP WSTG, Cheat Sheets, and Integration.