> First, nobody cares. Can this really be true? If so, why do you have a job?

Companies will select products with terrible security track records, then pay us to come in and beat up the vendor.