The same reasons why some teenagers find exploit in online games, finding exploits is "easy", programs nowdays are so complex that the security vector is pretty open.

On the otherside those rock star dev will get their stuff broken because of the above.