I am not sure anything is scaring anyone into urgency as long as breaches are no great issue for the company (in contrast to their customers and/or affected third parties).

Also, more secure code might be performing better, it might also perform worse. I am not sure the concepts are completely orthogonal, but there is at least no clear causality.