If management makes security a priority and makes sure there are proper resources and training in place, then applications and systems would be more secure.

As developer, I have X amount of time and budget and Y amount of projects and responsibilities. Guess what is a lower priority than functionality?