The problem in this scenario isn't software engineering necessarily, it's lack of punishment. Companies do things like this because it's cheap and they can fact

The problem in this scenario isn't software engineering necessarily, it's lack of punishment. Companies do things like this because it's cheap and they can factor in security breaches as simply a cost of doing business. A lot of these problems come as a result of an engineer prototyping or creating something on a tight budget, which then eventually gets deployed out either because said engineer leaves or against their own wishes. It's similar to housing. Training engineers to build a house correctly doesn't matter if the punishment for the house not meeting code is a slap on the wrist for their employer. Because their employer will just tell them to build fast and ignore the right way to build something.