Safer Coding

How long have we been told that cybersecurity starts with the programmer? And what does that mean exactly? What can we do about it?