Crime happens because it is profitable. As far as there is a good chance of winning from hacking, people will hack. So, I'm on the side of good security default

Crime happens because it is profitable. As far as there is a good chance of winning from hacking, people will hack. So, I'm on the side of good security defaults and practices so that one should invest in crime more than they are likely to earn from it. Harsher punishments won't help because the ability to enforce those punishments is what matters.