I believe the contrary. I work in higher education, where people are valued as investments. I have been instructed extensively in security, allowing me to create more secure applications for college/devops purposes. If I lacked the knowledge and they had simply brought on a security-focused developer, it would have cost more and could have resulted in a poorer suite of apps and standards, as I could overlook security flaws even a novice would spot.