In many industries, e.g. biotech, this is how it works. Every product is vetted so much and has so many regulations to follow and liability to cover, the profit margins are not as big as software companies. I argue that is one of the main reasons we see so many breaches and also why software developers are paid so much compared to, say, a biopharma scientist.