That's a good point, at least once a week someone decides that instead of reading the documentation and understanding the limitations of the technologies or frameworks they want to use...

They either just write a long blog post about how they can't screw in nails with a hammer.

Or they leave their security rules wide open and about half the comments are like, we need tools which stop us from doing stupid things.

No other industry works like this.