The insurance company-driven model for industry specific safety improvement that worked so well for fire safety and auto safety has proven impossible because of three factors:
1. Cryptocurrency allows for unimaginably huge untraceable ransom payments that Amazon gift cards did not support,
2. No liability in tort for insecure software, and
3. Lack of computer security regulation (e.g., your car must have a seatbelt and ABS but your software can be arbitrarily bad without being prohibited).
Are we trying to get a free working market or what??