> programmers are suddenly expected to be perfect reviewers of code they didn't write

What? The reviewer (me) caught the injection in the code I didn't write.

Running /code-review and /security-review on your own code before submission is bare minimum, not perfection.