Re: It doesn't HAVE to be insecure
They don't do it because it costs time and money. The CEO wants the product in the marketplace as soon as the hardware is barely working if the packaging and ad campaign are finished. Good Pen testing might take a few days or a week. That's £XXX,XXX in potential sales and maybe more if the unscrupulous bastards at another company get their very similar widget out first and they might because 3 people quit and went to work for them 2 weeks ago.