the average corporation does not care about security as long as someone else is paying the price. moreover they actively drag on security best-practices if they increase costs or introduce any friction whatsoever into consumer purchases. one of the reasons why we don't have CHIP+PIN in the US