Thing is, edge cases don't STAY edge cases for long.
"The point I'm trying to make is that companies that tout the security of their products should endeavour to good security practice."
Problem is, security clashes with ease of use, and the prole prefers the latter to the former and is not likely to take training. How do you do a secure solution for someone who doesn't care about security (and yes, you MUST care about their security since they become weak links to compromise others)?