Perhaps people find it interesting there is actually a college course dedicated to the subject.

I remember when I started at Travelocity in late 2007 that nobody cared about security. If it couldn’t be solved with Spring MVC, cookies, and HTTPS then it was the users fault. Marketing and media were the only concerns. We found it a challenge just advocating for usability and accessibility. I remember finding that interesting because I was doing information security as a part time job in the army reserves at the time.