Two different "philosophical" answers to this: 1. Patching known holes after the fact is just an arm's race that will never end. Better to do secure foundation

Two different "philosophical" answers to this: 1. Patching known holes after the fact is just an arm's race that will never end. Better to do secure foundations. But that leads to 2: 2. We can probably build a software environment that is a lot more secure than what we have now, but no one could afford to pay for building it, and possibly no one could afford the operating costs to use it.