"What customer would seriously want something this a month earlier that barely works?"
Works for whom? For the customer, "works" means the features work. Security is a vague, nebulous thought at the back of their minds.
The provider provides features. Lack of security has no impact on them, not in the short term and not in the long term. The short term we can't change easily, because people are people. The long term we could: regulation can turn negligent security into a lasting cost.
As much I'm against more regulation in general, I'm afraid as long as we don't do that, companies will always prioritize more features faster over security.
Works for whom? For the customer, "works" means the features work. Security is a vague, nebulous thought at the back of their minds.
The provider provides features. Lack of security has no impact on them, not in the short term and not in the long term. The short term we can't change easily, because people are people. The long term we could: regulation can turn negligent security into a lasting cost.
As much I'm against more regulation in general, I'm afraid as long as we don't do that, companies will always prioritize more features faster over security.