A very important point. This generalizes; currently the security enforcement regime is ineffective because there is no real liability for security breaches. If

A very important point. This generalizes; currently the security enforcement regime is ineffective because there is no real liability for security breaches. If companies were on the hook for damages from breaches, you can bet that things would tighten up. (And of course tech would improve/evolve more slowly! Few benefits come without costs. I think the tradeoff is worth it though.)