I think that what we're seeing is evidence that humans, in general, are not capable of securely delivering the kinds of online services that they are trying to deliver. It's just too complicated, and while defenses have to be perfect, attacks only have to work occasionally to be worth doing.
Edit: not that we shouldn't expect best efforts, and financial liability for organizational failures. Prison maybe for clear proven negligence or intentional sabotage, but for mistakes? Nobody will write software anymore. When is the last time you wrote even a screenful of code without a mistake?
So we should start treating them like licensed engineers... Actually I agree with this.
In the absence of any fine, most companies are comfortable with bit of reputation damage.
And software holds people to exactly zero standards and it shows.
And the side benefit is that we could summarily execute one every once in a while for failing to write secure code.
If they committed a crime.
Law enforcement failing to prevent a robbery is not treated on the same order as someone committing a robbery.
As a practical matter, I just assume that the data I provide to anyone will get leaked, because there's a pretty good chance it will.
Let's not forget the largest data breach in US history by Elon Musk and his DOGE kids.