Security is absolutely neglected all over the place in IT, including in things I've worked on myself. It's too expensive.