Because it’s mostly about checking compliance boxes than really caring about security.
Corporation are not able to "care". It's the boxes's fault. That is, legislation and/or enforcement.
alt Hacker News
Corporation are not able to "care". It's the boxes's fault. That is, legislation and/or enforcement.