I have yet to start a job that did not have glaring security holes in their web-facing Perl code. Web security is overwhelmingly a function of the hacker and only slightly afforded by safety nets and proper buffer checks and such in the binary/compiled code that’s running. Nearly every single newbie SQL question posted here is absent placeholders. And that’s just the most obvious example of pervasive security ignorance.