And deploying an insecure site is not a common pitfall or oversight? Until people quit acting like security is something outside of the core development and deployment process, you webdev geniuses are going to continue to screw your customers and yourself.
