Imagine you worked for a company that made a product that worked and everybody using it knew how to use it.  Imagine that product was easy to use and reliable, that users were by and large content with it.
Now imagine that the only way for you to keep your job was to incessantly modify the program. If it made it more intrusive or more difficult to use then the NEXT modification would address SOME of those complaints.  You could explain each iteration as a security improvement, that seems to satisfy a majority of people.  Job security is ever encroaching obfuscation programs that were simple, worked and while they had few bells and whistles, most people never noticed or needed those "improvements."  And security, like car accidents which are caused by the nut behind the wheel, happen because somebody did something stupid,ignorant, and clicked on a link in their email or sent all the information to somebody who requested it by email.