Yeah you’re right but for most businesses increased security doesn’t lead to more sales.
I’m not saying that’s right, I’m saying that’s how a lot of businesses think.
Of course this is why hacker news is becoming a list of sites that have been hacked.
Businesses that are paying attention to the winds though have already figured out that the internet is a hostile place: both their insurance companies and their governments are making noise about security.