> I suspect if people saw the handwritten code of many, many, many products that they used every day they would be shocked.

At a place I worked at with their core product written in Python, it was exceptionally common for engineers to make shell calls for file operations that had easy Python-native functions.

For example, rather than `os.remove("some_file")`, they'd do `os.system("rm some_file")`. Sometimes, the file name being acted on included user input.

I found so many shell injections that could have easily been prevented.