[8organicbits]

Idk, I have done security audits for startups and small tech companies. They won't have a security engineer on staff and are "moving fast and breaking things". I've seen things much more misguided than this.

[arcfour]

I just finished working at a small company like what you are probably describing. It was...horrific. But I try not to think about that anymore!