First you fix and raise awareness about the biggest cause of problems. It takes a long time. Then you do it again with the remaining biggest cause of problems.

First you fix and raise awareness about the biggest cause of problems. It takes a long time. Then you do it again with the remaining biggest cause of problems. Etc. There are tools and methods to address the "first world problems" of application logic vulnerabilities too. Maybe in another 20 years those are at the forefront.