I dont think they forgot it.

Just never something they considered.

"My app is to small and insignificant and not doing anything of much importance to be targeted by a nation state so I don't need to care about security"

That pervades the developer scene.

Blended with a spice of nothing to hide nothing to fear.