Most products are delivered on a very tight schedule.

The more hard-pressed the developers gets, the more they focus on getting a product that looks shippable.

Management probably never know about the security holes in the shipping products, and as soon as a product has started to ship, they reallocate the developers to another resource black hole, yet once more not realizing that the developers may have planned to "fix up" a number of weak spots in the first service-releases sent out.

For some products, this may not mean so much, since the constantly shortened product cycles means that a hacked product will quite soon be dropped from the market anyway. But some products - such as set-top boxes that may protect valuable program material - have a hardware cost that is a tiny fraction of the lost money from a hacked machine. Hence, the black market price for a hacked machine can be several times higher than a brand new pristine unit.