As long as the costs (monetary and otherwise) of breaches are not (by and large) hitting shareholders and the C level, why would they pay for better security? And why would politicians depending on campaign contributions of tech companies force the mentioned groups to take on the full responsibility by regulating them?
So full disclosure I am working on this but my thought is basically this:
* Make Rust (or similar memory safe language) drop in replacements for C/C++ code
* the stick is Claude mythos and the like - scares CISO’s, shareholders, etc into urgency
* the carrot is - improve performance significantly where possible. Either through straight up better code OR through customizing hot paths for companies specific use cases
So for companies running large workloads it could be economical in two ways