> Because they talk well and they've delivered before. Have they delivered something good and secure? Nobody cares, deadlines were met and functionality was shi

> Because they talk well and they've delivered before. Have they delivered something good and secure? Nobody cares, deadlines were met and functionality was shipped. This is exactly it. These product managers are judged on delivering on time, delivering UI glitz and UI functionality. Rarely anything else. Actual product security is not even in the top-25 factors they are rated on. One of these PMs once told me "We will put up some text on our website stating how we are extremely secure against all including nation state attackers, and that's the extent we're investing in security. We will not invest any time in implementation work related to this." Eventually we did get this PM removed, but about a year of damage was done. (LinkedIn tells me this PM is now at a FAANG) This is why I assert that silicon valley was ruined by the rise of the PMs. In the 90s I had never met a PM, now I can't throw a twinkie in any direction without hitting at least three.