Pretty sure this is because most of our public investing goes towards spying programs instead of more funding for places like NIST. Not to mention funding for

Pretty sure this is because most of our public investing goes towards spying programs instead of more funding for places like NIST. Not to mention funding for governments that actively sell exploits to other nations. Standards seem to be left up to the industry. I saw the Kubernetes hardening guildelines from NIST a while back that was cool.