I wonder if the hardening of cyberspace requires concepts like this? In the absense of sensational threats pervasive vulnerabilities in areas like usb, wireles

I wonder if the hardening of cyberspace requires concepts like this? In the absense of sensational threats pervasive vulnerabilities in areas like usb, wireless routers, HDD/SSD microcontrollers, etc. may remain unresolved. It would be nice if some of the same regulatory effort that goes into food and drug safety were apllied to commercial information security.