Add to that "shoot the messenger-ism" (pointing out an exploit is the same as exploiting it nefariously; punishment as follows), plus a good dose of information

Add to that "shoot the messenger-ism" (pointing out an exploit is the same as exploiting it nefariously; punishment as follows), plus a good dose of information paralysis (we can't add that security feature, we can't prove its safe), and finally a dash of "the device we have now is already approved, we'd have to do it again and it took 8 years last time"... You've got a recipe for some choice badness.