>>> There are many developers that take a lot of shortcuts, with hardcoded passwords and the like.

This.

Last year worked at a huge, multinational,privately held company. After being at my job less than two days, I found out they store all of their server passwords in plaintext, on the server, together, in one file.

It took me about an hour to compose myself. It was like having a dream where you come to work and you suddenly realize you left your pants at home.