I remember how one of the local Azure advocates blogged how there are two specialised security teams in Azure: 1. constantly improving security by patching products 2. acting like hacker(s) are already in the system and looking for them

I believe a 3rd group should be founded - our programmers did something stupid, looking for that.