If $typical_software_stacks have had enough "company ending" security issues ... maybe the whole industry have been seriously misguided for decades? Clearly they cannot have taken security serious in any way shape or form.
That's correct, but this won't dismiss the parent commenter's argument. A world wide industry cannot be held accountable, but a for-profit company's executive board can be.