Yes. This. And it’s not just about computing.
The actual trigger to make cars safer came about because the carnage on the roads was getting so frequent and so pervasive that it was hard to deny.
Engineers knew from the 1920s how to make cars safer with seat-belts and the like. They learned this hard lesson from aviation crash experiences. But it took until the late 1960s before anyone got serious about mandating seat-belts in cars.
Likewise for security. Money is being stolen all over the place, thanks to very lax computing hygiene. I look at computing resources today like a big steam farm tractor. It was a safety nightmare with exposed flywheels, belts and a terrifying lack of basic boiler safety systems.
Basically, like all human endeavors, we need to recognize that there has to be significant carnage before anyone will take action.
