This is the epitome of the "blame the victim" culture.
My issue is that software security is not taken seriously most of the time because features are more important than spending a little more time on code quality.
The hacker is not the one writing buggy software.