I'm always amazed by how firms let their AWS expenses get so huge before doing cheaper homegrown solutions.
But mainly, priorities and "it's not that much in comparison to all else". And perhaps not even tracking the costs properly :)
They have that much faith that the world’s biggest target will never be hacked nor hire a dishonest admin?