My opinionated "This Is The Way" stance, as a work in progress: Daily fines proportional to installed user base, on the basis of confirmed and not yet fixed CV

My opinionated "This Is The Way" stance, as a work in progress: Daily fines proportional to installed user base, on the basis of confirmed and not yet fixed CVEs. Amount inversely proportional to price of per-user software license (ie. the cheaper the gadget, the heavier the fines). Exception for AGPL-compatible licenses. Incentives and credits for smaller companies' training and audits. Funded by fines above. Incentives and credits for companies fixing CVEs on AGPL-compatible software. Funded also by fines above. Amount of incentives proportional to installed user base and severity of CVE. Audit practices defined by group of international bodies.