So you can't actually substantiate your claim that "virtually none implement proper security".

I am not sure why you think that mentioning a second incident makes your statement true for the majority of tech companies.