“A lot of users, a lot of developers, and even architects are not aware of the problems, and you cannot fix anything or remediate anything until you're aware of the situation.”

Transcript evidence from Erez Yalon — The OWASP API Security Project.