Why are networks so insecure?

One reason is we don't take network security seriously. We just don't think of the network as a serious target of attack. Or we think of security as a problem "over there," something that exists in the application realm, that needs to be solved by application developers. Or we think the consequences of a network security breach as "well, they can DDoS us, and then we can figure out how to move load around, so if we build with resilience (enough redundancy) we're already taking care of our security issues." Or we put our trust in the firewall, which sits there like some magic box solving all our problems.