It's not the codebase. It's not the team. It's not the vendor. The cause is almost always the same — and once you see it, you can't unsee it in your own organisation.