[rnnr]

From the point of view of a frontend dev front, things aren't much different:

security guy: You accumulate lots of experience over the years, where most errors happen, common culprits, but you _know_ the actual application of these ideas will always be different over time.

frontend guy: You gain lots of experience over time about common architectures, common best practices, common tooling, you _hope_ that the knowledge you accumulated will stay relevant over the following years, but in reality, except some basic concepts, everything changes. :)

I really liked his post. He pointed out to some deep issues like "Intellectual honesty" which I've been concerned about too(yea even in math) but I don't think the security sector is immune to these.