Because so many people/companies think about security as a secondary thing, and in most places Improving Security is some really simple changes.