“We should be protecting our applications against the threats that are 5 or 10 years out because our applications that we're building today are probably going to still be in service in 5 to 10 years.”

Transcript evidence from Jeff Williams -- The History of OWASP.