Hierarchical management structures are part of the problem. Managers generally treat technicians as flunkies and don't value their opinions, and most technicians aren't willing to get yelled at or fired, so corporate systems select for the lowest common denominator instead of the highest common factor. It's not going to change under our existing system because capitalists don't give a shit about consumers or employees, and 99% of managers just want to get into the winners' circle.
She is picking the wrong target. Tech would do security if directed to do security. Business management doesn't care about security.
Until someone has to pay big money or do jail time for lack of security, this will not change.