Very little to do with Canadian culture
What I learned from this article, it that off-shore development firms like the one from India that is mentioned, is where you will find the lax security and cultural differences.
There is no surprise at all about that statement.
If there is any cultural difference between Canada and US, it would be all the socialist/communist laws in Canada that make developing our own code a cost prohibitive activity.
Biting the hand that feeds IT
