There are two reason for this: First, many consumers have no idea what they should do to secure the products they use and, second, manufacturers try to make installation as painless as possible by allowing devices to work with default configurations.
FORBES: 2013: The Year You Get Hacked