My serious and simple response would be, why are you turning against law abiding citizens instead of focusing on the psycho criminal that was known to police prior to the event?
It is a layered security approach. Like when a system is hacked, law abiding users have to go through hoops with crazy passwords, 2 factor auth, etc. to deal with the psycho hacker.