The problem I see is that there are tradeoffs between security and usability, and again between developing security vs developing features. Security doesn't make money next quarter, while features and ease of use do.

Any software engineer can do security if they spend time learning and working on it. But executives don't seem to care about it.