It was more of a criticism of priorities in CPU vendors (product management?) than of engineers.

Security is absolutely neglected all over the place in IT, including in things I've worked on myself. It's too expensive.