Because security is inconvenient. The more secure the less convenient.
My company wants me to work from home. This means that I need to be able to connect to company resources over the internet. They have to balance my need to be productive and their need to reduce costs with the need for security.
Obviously many organizations aren't doing this well.