Unfortunately, companies prioritize profits over everything else, and sometimes that is at the expense of what should be the morally right thing to do. They can only be pursuaded against this by regulation, which they're also in a position to influence at their will. To say nothing about the usual government incompetence and tech illiteracy, which is another factor for technology products specifically.

And then you add the point GP was making, which is that regulation only happens when citizens demand it, and it is politically favorable. The extremely low percentage of the market that demands privacy and security, coupled with everything else, means that these things rarely if ever happen.