That's because security doesn't bring money on the table for most products. People are ok with their private life being violated, they don't mind discreet cens

That's because security doesn't bring money on the table for most products. People are ok with their private life being violated, they don't mind discreet censorship or mass monitoring. Since we make money with those users, and because the market moves fast, the only security most companies accept to afford is protection against script kiddies and bad PR. But there is a reason the average Joe doesn't care about all those things: it works for him, most of the time. The amount of persons really having their life seriously disturbed because of a security flaw is small. Even during the last decades of data leaks, the actual individuals suffering the consequences are a small number. So economically and socially, it's been a winning strategy up to now. Just like pollution, mass consumption, etc.