My takeaway from this is "do code reviews".