They should have made policy to require a certain level of security and fund efforts to implement such a system/standard. The policy would have been valid even

They should have made policy to require a certain level of security and fund efforts to implement such a system/standard. The policy would have been valid even after other systems (or newer, exportable browsers) appeared that offered similar or better security.