this is just marketing. where’s the results?

>72% of developers spend 17+ hours/week on security;

....what? Does anyone believe this? These are numbers parroted from bullshit studies (or a definition of "security" work so broad as to be worthless)