Every single new tech industry thing has to learn security from scratch. It's always been that way. A significant number of people in tech just don't believe that there's anything to learn from history.

And the industry actively pushes graybeards away who have already been there done that.