Yeah... sadly this industry has no barrier to entry. So it's largely flooded with people that claim to be professionals, but simply aren't. And if that wasn't bad enough, there's always someone willing to do it cheaper, cut whatever corners they can because they figure they'll be onto the next job before the excrement hits the fan and they will face no repercussions for their poor decisions.

I wish I could say this isn't normal, but sadly... it is. Security in this age is functionally equivalent to understanding. And end users, business or residential, don't really want to understand. So I'm not sure how any of this gets any better.