Hacker News new | ask | show | jobs
by _7gt4 1460 days ago
I think it's not a matter of not wanting to pay, but not wanting to have your departments "we had to pay someone to fix your security bugs" metric go up.

That's also likely why issues in the core product are taken more seriously.