They aren't being incentiviced hard enough. Security costs money and can be inconvenient both for you and the users, which is not good for startups. In additio

They aren't being incentiviced hard enough. Security costs money and can be inconvenient both for you and the users, which is not good for startups. In addition to that, attackers only have to get lucky once, the defenders have to check every entryway.