Insiders say that strong security measures were repeatedly rejected in favor of developing new services and not inconveniencing users.