‘Course it cost far less when hackers do it, even counting code reviews etc. The problem is that the hackers have to be willing and able to offer at the contracts before they’re let, which requires a company and adherence to a set of rules. Which, probably, jack the price up dramatically due to rules and their cost. Given the access to sensitive or private info, the legal issues are significant.