I agree. Part of cybersecurity is uplifting outdated patterns or anti-patterns in developed code… like teaching devs not to roll their own authentication or session management