I think the sad truth is that the very long swiss cheese record of this stuff just fits right into, and contributes to, the "secure internal network" mental mod

I think the sad truth is that the very long swiss cheese record of this stuff just fits right into, and contributes to, the "secure internal network" mental model of most on-premises cultures. It also benefits the vendors, because they can sell more feebly secured on-prem stuff.