Some of the reasons include lack of proper security measures taken by the companies you purchase things from, but also emotions clouding people’s judgement when prompted by such an alert.
You can see an example here and read the words of an experienced malware researcher on the topic.
Be very, very careful when receiving and reviewing delivery notifications, as they’re very effective for spreading the worst kind of malware, including financial malware and ransomware.