A large amount (a majority maybe even?) of software written outside of Silicon Valley is "boring" business logic-y stuff that has a very limited ability to impa

A large amount (a majority maybe even?) of software written outside of Silicon Valley is "boring" business logic-y stuff that has a very limited ability to impact anyone's lives in a meaningful way. I haven't thought too deeply about this but the solution to the PII exposure problem, in my opinion, is to heavily disincentivize entities from holding any data that they don't absolutely need to (probably via punishingly them heavily for slipping up).