Is it really that obvious? If a company gets a bad rap for being insecure, is it rational to go for them? Sure, you should do your due diligence, when picking any solution, but it's certainly a factor which could discount someone from a shortlist.

You're not always the one to make a decision. When you are, there are a number of stakeholders who can influence your course of actions, and when solutions are similar enough, it is easier to take the path of least notoriety.