@dixon I've never worked at CF specifically, but when I was in infosec 2001-2014 the industry was hit or miss on it. Earlier the tendency to rush was present, but either it wasn't as strong yet or else I wasn't as attuned to it yet.
The part of IBM I was in (ISS/X-Force, 2006-9 and 12-14) honestly was pretty okay on this particular point. And when I took a step away from corporate and worked at Emory University Libraries 2006-9 it felt pretty balanced. I wonder if any of those are still things.