Sure, let use the DEA to enforce that law since they are already experts at persecuting victims. How about instead the government proactively pentests and fine

Sure, let use the DEA to enforce that law since they are already experts at persecuting victims. How about instead the government proactively pentests and fines orgs for security violations,and uses the money to finance education, training, and security development?