Security isn't valued.
The biggest problem is that nobody values security--until it's broken.
It's not usually a priority with either consumers or corporations ore even government.
This has encouraged vendors to ignore security too. The modern marketing model cares only about what will get the customer to purchase--what the customer may need that they are unaware of, is sold only based upon it's known marketing value.
ATM's ran for 5 years without even loss insurance, much less encrypted traffic.
The default system should be secured, you should have to actively unsecure your system (of whatever type computer, phone whatever.)
This hacking is merely an extension of the cellphone monitoring which used to be the common way to intercept cell calls.
To date, there are no unspoofable systems (though some biometrics are close,) but then, security is always a matter of who is willing to spend the most...any security can be beaten by someone with enough resources.
The unfortunate truth is that most information is not at all secure--taking almost no investment to circumvent.
How can anyone be surprised that journalists (who are paid based upon their ability to create sales--to deliver unique data,) would use the same methods that the government routinely use, often with even less probable cause?
I'm fairly certain that few if any truly secure systems will be developed & sold until the law requires system security.... Like insurance, security is way down on the list of things people consider.