Laziness may make the problem more likely, but even a disciplined team working on security-critical software can make mistakes[0].
[0] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777