... because people (by which I mean software vendors who should have known better) irresponsibly failed to create secure systems for those average users to use. A whole lot of which came to be justified by "it'll be behind a firewall" thinking.
Software was created with no security because no one demanded it because no one cared. Technologies that came later did not create that situation.