You know what the problem is in software engineering? A LOT of people have no clue what good software engineering is.
I was working in a company before which used md5 in 2015! Databases on the internet with a 5 character password. No tests.
A person i know would have broken the whole production DB if i wouldn't have stoped the PR.
Another ex-collegue thought its okay to 'encrypt' with a basic shift cyper creditcard data.
I don't think any of these companies care that much