We have things like cybersecurity insurance that's required to be carried for vendors when working with the government, but much greater investment in both priv

We have things like cybersecurity insurance that's required to be carried for vendors when working with the government, but much greater investment in both private and public sectors into secure coding and operational practices (namely by making commonly insecure things much more secure) would be helpful to at least some trends away from the current dominant mentality of "ship it first, ship it fast" dominating the software business. I don't think it makes much sense for a random one-off script written by some lone developer starting a company to be subjected to all the alphabet soup of regulation, but I don't think letting everyone get away with security breaches forever is a good idea nor is just throwing up our hands and going "oh well, we're going to keep getting break-ins" for another 50 years.