[ianamartin]

It works like this: lawyers come up with a security checklist. Managers make sure the checkboxes are checked. Engineers are all ignored because fuck you, your opinion isn’t on the checklist.

It’s security theatrics, not actual security. And if you stand up for something more, get ready to quit because you won’t be listened to.