Comment by przmk

Because it’s mostly about checking compliance boxes than really caring about security.