Yeah. But how about fining the shit out of companies with found vulnerabilities and data breaches? I can guarantee you they would all harden security in a day if the fines were costly enough
I'll stand with you on this one. I used to work for a cowboy company and I disliked being the minority that actually cared about stability while the head honcho did lip service to the concepts everyday.