Na A lot of it now days is gross negligence and bad default settings. Steve Gibson at the Gibson Research Cooperation rants about it all the time.

https://www.grc.com/securitynow.htm