A responsible CEO is going to have to think very hard about publically accepting responsibility for an event like this. Accepting responsibility publically put

A responsible CEO is going to have to think very hard about publically accepting responsibility for an event like this. Accepting responsibility publically puts you in a difficult situation if there is a lawsuit. I feel like the writer is a bit naieve about the realities of "insecure" software in writing this article for more than just being unaware of why a ceo has to frame the discussion as abuser-centric. Writing secure software is not easy. Putting liability in place for writing secure code would open every software company in the world to risk of lawsuits and there would never be any real resolution. The best in the world still get security wrong and on top of that you are architechting solutions on top of layers and layers of abstraction. An attack against a lower layer is usually how you end up getting hacked. You might as well write a law that says everyone gets free unicorns.