I suspect that at least one cost to entry that might be coming down the pike is a legal requirement to design secure and resilient systems / software liability.

I suspect that at least one cost to entry that might be coming down the pike is a legal requirement to design secure and resilient systems / software liability. This might start in sectors deemed “critical infrastructure” but that line is increasingly blurred.