Because how many attackers are actually interested in attacking fax? Like… have you ever heard of hackers hacking physical mail? It’s to old for people to care, and “people not caring” is implicitely secure by ignorance.