13. It's a market for lemons [1]. Schneier wrote about it in the context of security related software, but it equally applies to bespoke stuff like CRM or SCM.

[1] https://www.schneier.com/blog/archives/2007/04/a_security_ma...