Tell them to focus on making sure their own code doesn't change to break security before judging code they've never seen before.
Discussion
Lol. He's a published PhD who puts Dr. in his title.
What a chump. I'm glad he does because it automatically tells me that his opinions are shit until proven otherwise.
Ok the other hand, my physical therapist is a doctor of PT and I didn't realize for weeks. No wonder he's so good 😅