Honestly this seems no different than a software security team. Yes, you want your developers to know now to write secure software, but the means of doing that is verifying the code with another team.