But ultimatly all developer has to write secure code or build secure software.
The cynic inside of me wants to say: because they don't. In my experience, building truly secure software, and the knowledge of how to do so, usually take a back seat to general feature work. Sad, but true. Having experience in this area is certainly a plus when I hire a developer, so it may be a differentiating factor in the job market.