Developers have always cared about security. The problem is the security team's ask: fix 1,000 scanner tickets, none of them relevant to what you're actually building. Security teams that generate noise lose all credibility with the engineers they depend on.