Cheap Chinese labor. Security costs time and time is money. So why bother if it isn't giving direct profits? Customers still buy them servers so, no problem in the revenue stream (yet)