Security vulnerabilities become a credibility liability
A firm whose business is protecting other people's information or property cannot afford to run a compromised website. A hacked or defaced site undermines the exact trust the firm is selling, faster and more visibly than almost any other kind of business failure.