[idle_zealot]

They technically are, but at least in the US we're allergic to "anti-business" punitive fines and liability, so it ends up as a cost of doing business. Wouldn't want an anti-business law to scare away a company leaking everybody's data. Think of the economy!

[Buttons840]

Yep, widespread security holes are literally a national security issue, but making things convenient for companies is more important.