To cut a long story short: ignorance.

Most people just don't have a security mindset. They are happy when it works the way it is supposed to.