Enterprise software isn't middling, it's usually only barely functional and falls just short of what it should do (i.e. it's shit). Everyone is just so pathologically used to it they think it can't be better. Probably due to the allergy to risk that you mentioned. Ironically risk is eliminated, but in doing so you've just ensured you have consistent problems that can never get better.