It’s the state of the industry.

And I know several automotive repair facilities that so incompetent it must be malicious.

A car repair place loses business if they don’t competently repair your car. That’s apparently not true for large tech companies for whatever reason.

So if your car repair place sucks at fixing your car, you should find a better one or do it yourself. If your tech service sucks at protecting your data, you should find a better one or do it yourself.