Recently at a social gathering of programmers TODOs came up and we all had dramatically different practices

Defense contractor: TODOs don't make it past CR. This is a heavily regulated industry with yearly release cycle

Embedded: TODOs can make it to nightly builds but not final/released build

Web: TODOs are fine, fix them as needed.