One of my favorite quotes applicable to software development: "First solve the problem, then write the code" and it is sad when younger generation of devs can't grasp meaning of such quote. That's where many security problems arise from, devs pushing something out of the door, just to check a box, on the other hand at some companies had screwed up their KPI's , so fixing 2 defects in a week would appear better, than taking a week to properly resolve 1st without introducing 2nd.