I don't want to sound like I'm pontificating or defecating on the corporacy at everyone's favorite hardware company but it strikes me that these sorts of lapses are cultural and stem from this tedious emphasis everyone places on having "relaxed working environments"[0]

Does it surprise you that the product of this culture also has relaxed security characteristics?

[0] https://www.nvidia.com/en-us/about-nvidia/culture-at-nvidia/