[bagels]

Yeah, many probably wouldn't get fired for that, but small consolation for a breach.

[scott_w]

The very fact it was audited massively reduces the chances it’ll be breached compared to a random JS file that hasn’t been seriously audited. A “please read and tell me the problems” is NOT a security audit.

[bagels]

I was only addressing this part: "and still have a job".

Clearly well audited code is likely safer.

I just don't think that screwing that up will definitely lead to most being fired.

[scott_w]

You can’t separate “auditing can reduce chance of breaches” from “using unaudited security critical software when certified alternatives exist can be gross negligence.”