>Web developers are making these errors because of the high demand for cheap web devs churned out of "learn to code!" bootcamps coupled with the fact that the people writing the checks don't understand security.

Cheap developers with no senior oversight and code review? No [automated] security testing to catch the basics?

You're getting what you deserve if this is the only level of talent and organization you want to put on task.