Widespread incompetence by the people paying the bills.

It wasn't just Crowdstrike that failed. it was the entire corporate structure that decided it was a good idea to have so many companies depending on a single end point protection company at the same time. as if that isn't a singular point of failure just waiting to happen. Whatever happened to defense in depth?