I've been the employee who describes what needs to be done to improve security, only to be ignored. And then some rando off the internet makes note of the security shortcoming in the product and suddenly the boss is going crazy. He says stuff like "Why didn't anyone tell me about this?!" And fixing the issue needs to be done yesterday. No, no time to fix it properly, let's slap together whatever we can and rush it out.
So glad I quit that job.