A while ago we were discussing an interview with Evernote's CTO about security (https://news.ycombinator.com/item?id=6881992). He basically argued that fundamental security measures (like properly encrypting passwords) are okay to do as an afterthought once the product is out the door.

If Evernote takes the same "features first" approach to reliability, redundancy etcetera, that would explain a lot.