Yeah fully agree. It's a big ask. Reading my comments again today, I made it sound more negative than I should have. It would be awesome to have that, but often unrealistic.

About bottom up training, I'd also love to have some extensive training on app security too. I know some basics, but learning some more systematic security testing would be cool.