We expect privacy and security controls to be in place for the web applications we use every day. This means not only the use of basic security encryption, but also proper security for stored data and secure environments for the development and deployment of applications. For all of these controls to be in place, web application developers should be more engaged in security practices.