Sometime back, I tasked a junior to work on designing a quiz application for a college competition. Lo and behold, he had used a POST request for every call to an API and this made the code very buggy and untestable. Here's the conversation that I had:

Me: Dude why is everything a POST request?
Junior: POST is a lot secure right? Nobody would be able to read anything from the request.

FML