You're 100% right, which is why "periodic evaluation of industry standards" is such a critical part of any SDLC or best practice. Tech moves faster than other i

You're 100% right, which is why "periodic evaluation of industry standards" is such a critical part of any SDLC or best practice. Tech moves faster than other industries of course, but in general technology is just a sped-up clone of basically anything else. We didn't (and couldn't) make a definitive set of best practices the day we invented the computer, we made them up as we went along. Like the car industry, where safety standards were tightened as technology improved. We do have companies already making a stand on security, using it as a competitive advantage. Apple, for one, has staked their name on their security in the past few years. That's their competitive advantage, is how secure TouchID and their secure enclave is. You're right that consumers don't see security as entirely necessary yet, but it took a long time for seat belts and airbags to become standard in cars, and even longer for them to be appreciated. Even today, many people refuse to wear seat belts. But bear in mind, automotive security is a moving target too. Seatbelts, then airbags, then roll cages, then crumble zones, then backup cameras, then backup sensors, then automatic parking, then self-driving. There's very little that's new in the world, it's almost always been done before.