I would imagine enough bad press has caused some of the security enhancements of the past. Maybe more are coming?

My experience is that some businesses that use WP rely on other companies to maintain security, and maybe individuals or small businesses don't consider it to much.