Gox's incompetence has been proven already many times. On the other hand, they do seem to take security seriously, which is more than can be said of many past bitcoin endeavours. An organization (or a person) can be incompetent in some things and competent in others.

People are just mistaking the incompetence for malice.