Of course it's because security is not mandated. In the past, and in the present, there are many companies who are willing to kill people for the sake of profit

Of course it's because security is not mandated. In the past, and in the present, there are many companies who are willing to kill people for the sake of profits, if they can get away with it legally. IMHO, any commercial violations of human rights, like privacy, should have criminal penalties.