> In my experience infosec people tend to be pretty awful programmers.

Awful at using good design patterns, unit tests, and neat code maybe... But not "write everything to /tmp, tar it up and upload it cleartext".