Re: Why is lack of security a surprise?
I'd go a step further. The average member of the pulic doesn't want security because it would make the product more difficult to use. Security generally gets traded off for something - convenience, performance, cost, whatever. Right up to the time it becomes obvious it shouldn't have been.