I'm in so much agreement, though I would disagree with the last line. I've seen people wave away security concerns because they don't want to be bothered.

Developers waste plenty of time (we're all on here chatting away for one!) but ask someone to even think about security seems to offend them in the way that asking a teenager to clean their bedroom would.