> A bizarre and unexpected failure of the market. The consumers are, partially, buying a product they can't see: The security operations of the vendor. Given

> A bizarre and unexpected failure of the market. The consumers are, partially, buying a product they can't see: The security operations of the vendor. Given the consumer has imperfect information, it is exceptionally profitable for a supplier to just not invest in security. The downside being the risk of compromise. A market set up this way entirely predicts low-cost suppliers. With no way for consumers to introspect security routines, two vendors will appear to simply differ in price. The outcome is rather obvious.