Indeed. I had an employer that told me my output was too low for the first few years. Then we had a security audit (following an event) and my code was the only code that came through squeaky clean. They didn't talk about the amount of my output after that.

It's not easy to measure the value of someone's work, even years later, and certainly not immediately.