If it's a three person SaaS start-up or whatever, there's no guarantee there's a dedicated marketing team. And even if there is, the engineers/managers don't know better than to tell their marketers "hey don't use that kind of language". And the marketers selling a security product don't know better?

Sure, it's entirely possible that the product itself is absolutely solid. It would be a bit silly to rule a product out on this basis alone. But when evaluating a product, it's fair to "do a double-take" when seeing language like this.