Freelance devs: Oh, you wanted the app to be secure? The job spec didn't mention that

Boffins find pros-for-hire no better at writing secure code than compsci beginners

Freelance developers hired to implement password-based security systems do so about as effectively as computer science students, which is to say not very well at all."