It's the same reason they can't get good security experts to teach at universities. There was a study of 121 top universities and none of the top 10 require a course, top 3 didn't even offer an elective. Only 3 of the top 50 required a single security course.

https://www.cloudpassage.com/company/press-releases/cloudpas...