You can&#x27;t always enforce correctness. Consider the case of a typical web dev shop that hires a developer who thinks escaping is a good solution to SQL injection. It might get snuck past code review if you&#x27;re unlucky.<p>There are static analysis tools that can identify such problems ... sometimes ... maybe ... depending on the language and frameworks in use. But to deploy such tools you have to know about them to begin with. And most devs can&#x27;t simply produce such a tool if there isn&#x27;t one on the market because that&#x27;s not what they&#x27;re being paid to do.<p>Unfortunately, knowhow can&#x27;t be automated away entirely just yet.