If you want to find a good programmer, force them to use something incredibly stupid and make them do something ordinary. Then let them use something far more elegant and watch them create something extraordinary.
If you have responsibility for security, but no authority to make changes, then you're just there to take the blame when something goes wrong.