guess what? not every company can afford or even convince the best, ereetest security professionals to work for them.
most companies can't even configure their printers correctly, how do you expect them to harden their public facing servers?
you live in hackerland, and not reality.