“I bet you don't know very much about who wrote that code, how they tested it, what tools they used, were the developers trained, what open source components are they using, what other AppSec processes do they use to make sure that thing is secure?”

Transcript evidence from Jeff Williams -- The History of OWASP.