In my experience, junior devs are actually better about this because they haven't been ground down by years of corporate bullshit and shellacking whenever they bring up security holes or issues. Some of them will be a bit over eager and miss obvious stuff but unlike LLMs you can actually train them to be better about it.