@Feeds You look around one day and realize that the race is not to the swift, nor the battle to the strong, neither yet bread to the wise, nor yet riches to men of understanding, nor yet favor to men of skill; but time and chance happeneth to them all.
> For a developer, security means adding extra checks into their work:
I'd add "consider how the code would react if spec that is assumed to be followed is broken".
After all, many people take for granted that "MUST" and "SHALL" and the like will be rigidly enforced, and that may result in bugs appearing when the spec is violated.