Programming mindset is about making sure what’s in the spec works.
Security mindset is about making sure that what isn’t in the spec doesn’t work.