security issues if devs are not serious