It’s cheaper to do the very bare minimum security to stop hackers. The fines are worth less than the amount of money they can still make off your account. Same reason why you can see full-on pornography ads but you say “damn” once within the first minute and your whole channel gets nuked.