Both. The skilled will use them to find problems, the unskilled will use them to slopcode insecure software the skilled will have to fix.