I don't understand this argument. It's okay for things to be a certain way, because things are typically that way?

Apart from the circular reasoning, the practical impact is that you should also drop privacy review because corporations steal your data, security review because everyone gets hacked, readability review because there's a lot of legacy code, etc.