Why would you expect a tech company to do a better job securing this information? I've worked for both kinds quite a bit at this point and don't really see any

Why would you expect a tech company to do a better job securing this information? I've worked for both kinds quite a bit at this point and don't really see any trends either way other than "most don't really care and there usually aren't consequences so why would they" and that's universal.