No, the reason is legal. Everything, and I mean everything else is secondary. They can tell in court that they did everything what they could. Of course:

- it’s a lie

- not even a white lie, they know perfectly well, that they can do way more

- most of the security “features” are completely useless

- they also know this

However, it’s very difficult to prove these, and laymen don’t and won’t understand the details.

And if any law ever goes after them it'll be years before any court charges them with anything.

By that time the amount of money that will have been made can justify and exceed whatever fine they might expect to get in court.