Is Penetration testing worth learning for a web/web App developer for future security purpose of SPA, will it also be a part of so called 'Full-Stack'?