There have to be consequences. Data breaches, ransomware hitting hospitals, malware of all kinds is screwing up too many people's lives and threatening public safety and these events happen almost daily and on a massive scale. Hardware and software companies with vulnerabilities in their products need to feel it sharply in their pocketbooks, and employees and IT personnel at financial service companies, retailers, and educational institutes like ALERRT need to experience legal or financial impacts from their carelessness. Only consequences will motivate improvement. As of this writing there are 32 class-action suits filed against Intel for Spectre and Meltdown, and that's a good start!