It's the evil you know vs taking a chance on the unknown. Plus the short-term thinking that plagues most people.
This is why most companies fail eventually. Hiring and promoting based on relationships instead of skills. You can grow a relationship. But a bad employee will never get any better. Especially if you bump him up to management.