I work in quality assurance for internet applications and network security, and I can tell you that most systems out there are being built as quickly and cheaply as possible and are full of bugs and security holes. Its a problem with human nature, nobody cares about security until there is a crisis, then people run around like busy bees for a couple weeks, and then its business as usual.