Products are optimized for maximum revenue and sales, not for how secure they can be. That optimization can be something as simple as shaving a millimeter of plastic off the case or skimping on the software audit designed to catch flaws, assuming a security audit is even performed in the first place.