[foolmeonce]

I think the problem is security in the software industry is not compatible with the US' volume production style economy, so more spending will be on more low/no assurance software that matches more checkboxes, raises costs and further deteriorates security. Companies that minimize their attack surfaces will be the only ones that cease to qualify for insurance under most legislation that would appeal to the industry.