Probably similar reasons to why IOT companies can’t do security.

Why use best practices from other industries when you can re-invent things?