Mythos isn't needed for majority of appsec

I genuinely think for the majority of appsec mythos is not needed. From my observations and consulting experience maximum software is a different flavour of the same base system - ecommerce, social media etc etc. and all the bug classes are invariants of each other. I experimented shit ton with