[trod123]

The real issue is companies are incentivized to be hacked, and to collect everything so they can sell it as a subscription.

They have almost no liability for improperly securing their own systems and they allocate their budget accordingly.

There is a general presumption of no liability for software flaws. The execs gamble at whether or not they'll be hit with a data breach, or hit the jackpot (before they move on with their shares vested).

Its a simple calculus of headcount affected by cost of identity protection services for x time vs. ongoing recurring costs.