If you need to knock someone down a peg or two, just get good at finding race conditions.

Webapp coding is harder than it appears because of them. I haven't worked in a codebase without them.

But they're usually so unlikely to happen it's not worth fixing them all because it can lead to very specific and tricky code. So as long as the consequences of it occurring aren't really bad, I just leave it alone.