> How is it that these companies still don't give security a passing concern?

Lack of lawsuits. The kind that bankrupt companies and set binding precedents for everyone else.