It's acceptable to cut corners and ship shoddy software to consumers, because if anyone points out the flaws, they're being "irresponsible". The responsibility to protect customers is therefore shifted away from the vendors onto researchers. Pretty sweet deal, because good quality security engineering is expensive!