Similarly, nobody goes to jail for using pirated software, securing users' data via security-through-obscurity, etc.

There are a lot of corners you can cut in the Valley before you've cut too many, and companies know this.