Litigation does of course occur but it's not the main mechanism.
Do you folks coordinate in the way described, and show success with it? (Would most people agree with you?)
1. many countries have higher regulatory burden than the US
2. that does not mean regulatory gaps don't exist
The person above was simply pointing out that litigation is not the only way to solve a problem. Which is plainly true, you can simply require compliance via other legal means. For example, a government could create a regulatory standard for security and require vendors to follow it. Whereas in the US the political appetite is to be more hands-off and allow people make vulnerable products if the market allows.