Maybe because they are plentiful? I'm not familiar with infosec but if the bar for getting certified is "I can take a class and pay $XX to get this certificate" then of course they're worthless.

I agree, but in theory that can mean that we haven't found good certifications yet.