+100 this. As devs we need to internalise this issue to avoid repeating the same class of exploits over and over again.