Next is audit happens, issues get flagged, and devs ETC learn from audit, apply to other situations, ETC. That usually doesn’t happen either and it’s not because devs ETC are lazy. +