You can ask this question about almost every non-software company. Hell, you can ask this question about most software companies. The real question is "why are

You can ask this question about almost every non-software company. Hell, you can ask this question about most software companies. The real question is "why are most people and companies incapable of using cryptography properly?"; and the answer is that doing cryptography right is hard, especially if your use case isn't a common one.