Yeah - selection bias and apathy is the root of it, IMO.

GoDaddy attracts the unwashed masses who don’t care about security, and who remain unphased after learning about breaches. Meanwhile, the tech-savvy crowd who would care about breaches already know to avoid GoDaddy and view the inevitable breaches as the plebs reaping what they’ve sown.

Ergo, no one getting breached by GoDaddy cares, and nobody informed watching it happen feels a need to intervene.