Instead of a subsidy why not just make companies ineligible for security breach liability insurance if they continue to use a memory unsafe language. It'd be a

Instead of a subsidy why not just make companies ineligible for security breach liability insurance if they continue to use a memory unsafe language. It'd be a quite trivial change and we'd see an immediate shift from the largest players with tooling improvements in newer languages and momentum causing smaller companies to follow suit.