Right, and instead of companies promising safety they can't deliver, it would be better to just be honest about the fact that it is hard. And again, to take it

Right, and instead of companies promising safety they can't deliver, it would be better to just be honest about the fact that it is hard. And again, to take it a level further -- I would absolutely use a company's software under one, and only one condition -- indemnity/warranty. Any company that is willing to go "If you get breached, we will pay for the harm" can absolutely take my money.