Why do vendors ship us junk they wouldn?t use?

Kurt Seifried notes that many common insecure daemons or services like telnet/named/wuftpd are still used in many distributions as default installation. So vendors don´t mind security that strong as they should.