> [...] until the incentives have changed. I think it's not only individual incentives, it's also the incentive structure of whole ecosystems. The way we writ

> [...] until the incentives have changed. I think it's not only individual incentives, it's also the incentive structure of whole ecosystems. The way we write software nowadays (or even do other business processes) includes so many complexities and therefore potential attack vectors that I doubt anyone anywhere doesn't have gaping security holes unless they're writing code on airgapped systems where every component is thoroughly vetted or something. Just take a look at the crazy amount of (transitive) dependencies that any average web app (frontend or backend) has nowadays, or all the different infrastructure components.