It's too hard. The fact that there was a culture of disabling it means that it was a total failure as a tool to secure the average server.

I think it's found its niche, finally, on Android because you can't really break an Android phone the way you can a linux server. You don't have root, the system doesn't change much, certainly not at the linux layer.