I worked for a shop in the past that had this problem in spades - huge ColdFusion and PHP ecommerce sites that were a gigantic ball of horrifying security and functionality failures, started by people who taught themselves how to program on the job because someone said "we should sell our stuff on the web".

I guess the world is probably net better for those sites existing, even as they are, but it feels like PHP could have done a better job of helping learners not shoot themselves so violently in the foot.

Academic journals, book publishers, Linux distributions do vetting.

Reputable journals, publishers, distros are more strict than non-reputable ones.

Universities do exams. Companies do interviews.

Why is it acceptable that some software communities have zero standards?