Security practices may be better now, but applications are a lot more complicated (meaning much more attack surface area) and there's a lot more at stake now.