OH: Too many people ignore basic security principles (or worse, try to roll their own, which almost always is worse than open source stuff)