What we desperately need is a structure for taking companies to task for repeatedly publishing insecure code, something like an FDA for code. Anyone distributing weak code makes everyone less safe, so it should be a public responsibility to find and eliminate insecure code. It shouldn’t be the responsibility of every citizen to vet every piece of software they use, and it’s impractical on multiple levels anyways.
While I’m fantasizing about impossible administrations, how about a department of fellatio? It’s only fair the government blows everyone like they’ve been blowing corporations and evangelists for the past 30 years.