That's because they're usually required to accept the lowest reasonable bid. As someone who works in the public sector, trust me, we try to get the money to people we know will do a good job. We have to work with the shit we buy every day. We want it to be good. There's just a lot of people willing to put in maximum of effort on a bid and minimal effort on execution.
> Also, for real, this bug is not that bad. It's obviously a bug you'd rather not have. But no user data is lost.
I mean, kind of. I agree it's not as bad as the article implies. However, it's a pretty common pattern to download a zip file, extract and overwrite, and then throw out the zip file. It's not directly resulting in data loss, but a very common user pattern will result in data loss when you encounter this bug.