because software developers aren't engineers? -- elephant in the room.
And some call themselves code monkeys, they know how to follow orders, but have no incentives at all to think by themselves for proper security.
Only a tiny fraction call themselves engineers.
I favor non-licensed free professions, but if you're free you should be able to follow best practices and be able to think for yourself.