You haven't worked in corporate IT I gather? Security and Privacy are at the bottom of the list when it comes to most businesses IT expenditure.
I wouldn't disagree with you though in regards to a large proportion of companies in those two areas. I however was specifically speaking of the other industries, the majority of which still see IT as an unnecessary expense and anything more than "new password every 30 days" as an inconvenience.