[martincmartin]

I'm calling out lazy security that cuts corners because doing it well takes time and effort.

Time and effort cost money. It's possible that the value gained is less than the cost, and so therefore isn't worth it. Of course, it's also possible they don't understand the value gained until there's a scandal.