I'm not talking about sanitizing inputs from a web form headed to an SQL database. If you're referring to the cheapest possible bidder that pays pennies for shit code, then obviously you'll get exactly what you pay for. You seem to think that that's the only option out there. It's not, and that's my point. Like I said, generic components that fit everyone's requirements are the hardest components to get right. I did not state, nor imply that they do not exist. You can infer, however, that there aren't that many out there that can truly be used by everybody.
I'm wiling to bet that the primary reason you've only experienced "shit programmers" that "mumble" and don't give a flying fuck about your business is percisely because of how much of a flying fuck you gave about them, personally and professionally. Give nothing but contempt, and you'll get nothing but contempt in return. Fail to invest in them, then don't expect any investment in you in return. Ride them constantly, and they'll give you a reason to ride them, because it wouldn't matter to them one way or the other... why should they bother if you'll never acknowledge anything anyway.
If my experience taught me anything, those concerned with blame are a cancer on the mind, creating an environment fit for a soap opera, forever stuck extinguishing existing fires simply because they won't bring the building up to code.
If it's worth hacking on well, it's worth hacking on for money.