Sometimes good ends can ONLY be brought by bad means.
Like, realistically, how would you convince the Forbes 500 to increase spending on software security? They won't budge if no one is knocking the doors.
In general, it is in human nature that we prefer to mend the situation as late as possible, as long as it is not too late, instead of curing a disease before it develops. People who do the first thing are praised and hailed, while people who do the second are laughed at.
The result will be Fortune 500 companies spending millions and billions on "Security Companies" who pocket the money and produce lots of paperwork absolving everyone of any form of blame, whilst the actual maintainers will still get a can of diet code and a misspelt acknowledgment somewhere.
Like, realistically, how would you convince the Forbes 500 to increase spending on software security? They won't budge if no one is knocking the doors.
In general, it is in human nature that we prefer to mend the situation as late as possible, as long as it is not too late, instead of curing a disease before it develops. People who do the first thing are praised and hailed, while people who do the second are laughed at.