The things you describe are reasonable in general, but break down under the extremes of present day security, software development too. The problem is that most

The things you describe are reasonable in general, but break down under the extremes of present day security, software development too. The problem is that most people who think they can do it, can't. That is, most professionals will take on more challenging problems than they are practically qualified for. If the bulk of an industry can't judge its own competence, customers and courts have no chance of doing so. And yet this is increasingly a requirement for doing business at all. You can't simply tell people to stop using computers. If you can't define "reasonable" for the purposes of writing a law, it's a good indication that people won't know what it means when they try to obey the law. You can't make laws that nobody knows how to follow.