Regardless of who planted them, security was not up to par. I can see them missing one bomb, but 2, 3?
But remember, it was 2 hours after the first finishers, when all the news media and big crowds and politicians were there. Nobody was expecting bombs two hours later!