“They're usually using a modern framework.”

Transcript evidence from Jim Manico -- MORE OWASP!.