While I do not like the 'get out of breach free card' that companies like Equifax seem to get, your tone has that exact sort of arrogance that smacks of immatur

While I do not like the 'get out of breach free card' that companies like Equifax seem to get, your tone has that exact sort of arrogance that smacks of immaturity. You just can't always apply today's sensibilities to code that has lasted longer than your life so far. I agree that companies need to be held responsible for their decisions not to update security, but that's a different (related) issue than 'legacy'. I am more concerned with legislation and law enforcement. That's the real way to fix things. Rust rewrites wont change business incentives.