I think half the issue is that we've got lazy developers who circumvent security in the name of repid development. I can't tell you how many developers I've worked...