I think the way to make this proposal work is to pass legislation to actually have meaningful financial liability for data breaches. IFF companies have financi

I think the way to make this proposal work is to pass legislation to actually have meaningful financial liability for data breaches. IFF companies have financial liability, then the market can be expected to find a cost-effective solution. Without any selection pressure though, there is no reason tho think the market will spend resources to solve this. Users empirically don’t understand security, don’t price it appropriately in advance, and aren’t able to evaluate the security qualities even if they do want to pay more for a “secure” product.