Software is usually developed with a strong focus on functionality, not security. In many cases, security controls are bolted on as an afterthought...