Then a handful of years later they forget it all and repeat…

They don't forget, they never learned in the first place. In their minds the original engineers messed up, and that's why there was a vulnerability, or a missing feature. "We need a quick and cheap vendor to fix the mistakes of our awful engineering team that we laid off a year ago".