I don't think usable should also mean insecure, but I understand your point: the focus is on the first, and security gets minimal attention. Eventually companies will be in a position where security will have to be given more focus or they risk it being regulated.

I have noticed over the years that, for example, default passwords aren't hardcoded but instead based on the serial-number printed on the device's cover; some even go as far as forcing a password change. Small changes like this go a long way.