If so few users care about security, why should the government regulate for that outcome? I think theoretically the argument above makes sense, but in reality

If so few users care about security, why should the government regulate for that outcome? I think theoretically the argument above makes sense, but in reality it doesn't. The market that exists doesn't provide a solution because the barrier to entry is basically infinite. Even Microsoft couldn't offer an alternative to iOS and Android because Microsoft couldn't do it alone. It's a natural monopoly problem, which means normal market arguments don't work.