<p>openssf reaction is what I'm getting for 25 yrs from "security" just a *bam* "you're doing it wrong" & "do this, this and that" with (mostly) disregard for user's needs, time, performance. 90% coming from smbdy who hasn't done bigger software projects, ever. security tooling has such a high entry barrier that I can't just "slap it in" as a developer.need tools? answer always: "that's not our job". and. the. jargon OMG</p><p>Recent job is my 1st company with a secteam doing security services FOR me.</p>