[belorn]

The hinted solution then is for webshops to provide some form of liability protection for the client.

If the website is buggy (like a leaking pipe), its the webshops fault and reponsibility to fix. If personal information was leaked thanks to bugs in the website (ie, the leaky pipe caused a flooding), then again the webshop is responsible.

If a customer know that they are not responsible to maintain the website security and protection of data records from customers, then I suspect many would be willing to pay quite nicely for not being "on the hook" if something goes wrong.

To make that economical possible for the webshop, we might need to utilize regulations. With plumbers, they are forced to be liable, so everyone is competing with that assumption. It is always part of the price, and they don't have to compete with non-liable plumbers that can undercut the price.