The article states that current practices don't serve the company or the people. This is false. Good security is very expensive. The board knowingly bets that t

The article states that current practices don't serve the company or the people. This is false. Good security is very expensive. The board knowingly bets that the damage will be far less than the cost. Meaning it's a non tangible effect to them. It's mostly noise in the form of drama. If we want security we have to fix government. No other industry can just expose SSN's, credit cards, personal details, and get a slap on the wrist. Software must be treated like an engineering profession and have the responsibility to uphold standards. If not, they get big fines that go into paying the victims and research into security. This will not happen in the U.S. because bribery is legal and tech corps are all in on using it to make the world worse for everyone except themselves. You need a different country to have a properly functioning industry. The EU is doing very well at this.