Right before LLMs blew up, it felt like there was a good cadence across orgs with devs referring to OWASP, building threat models (I was a big threagile in the CI/CD fan) and participating in XSS CTFs like Juice Box.
Then the 10x conscription and gas lighting came via a horse-shaped LLM.