> I think a big part of it is that failures in aviation safety cost lives

This is an interesting point, and it certainly affects the incentives involved and the amount of resources allocated to mitigating the problems.

I do think cyber security incidents with real consequences are likely to become more common going forward (infrastructure etc). We haven't experienced large state actors being malicious in a war time footing (yet).

Will we able to better mitigate attacks given better incentives? I think that is an open question. We will certainly throw more resources at the problem, and we will weight outcomes more heavily when designing processes, but whether we know how to prevent cybersecurity incidents even if we really want to... that I wonder about.