I’m a pretty decent programmer and I like to think that I know a lot more about computer security than most developers. I know for certain that if a well funded

I’m a pretty decent programmer and I like to think that I know a lot more about computer security than most developers. I know for certain that if a well funded nation state went after data on a system I built, they would likely get it, no matter how hard I tried to prevent it. There needs to be real audits, with teeth, of computer security stuff - audits run in an adversarial way without the issues involves in financial audits. If you pass the audit, the fines should be minimal in the event of a breach.