BGP by itself is insecure, but an (RPKI) infrastructure has grown up around it so that it can, and should be by now, secure.

Yet BGP injection attacks (ASN or prefix theft) happen regularly. The reason is that not everybody follows the best practice here. It may well take a massively disruptive attack before this gets any better.