Of course it should, but people get lazy ("this email doesn't have anything sensitive in it, so meh"), or some issue disrupts a busy vendor's workflow and they skip it (like what happened in the case of BlueGiraffe), or they don't have an add-on like Enigmail to automate it, so it takes too much time. People take shortcuts all the time, that's nothing new.