If prevention is better than cure, why do firms do the opposite?