Re: Both sides
I'm not a fan of heavy-handed gummint action, SPECIFICALLY when it's obvious that gummint LACKS anything resembling "a clue".
That's ALSO because gummint mandates only apply to 'today' and 'politics of the day'. Tomorrow, something may change that completely invalidates "all of that" and we're stuck with some gummint mandate that doesn't go away as quickly as it was applied to the citizens' lives.
A better standard would be LIABILITY. Simply pass laws (and clarify existing ones) that make manufacturers LIABLE for being sued over inadequate security, and let the lawyers and courts decide how that goes.
And in this latter case, you'll see a SCRAMBLE by vendors to make the claim that THEIR system is the MOST secure, with frequent updates and 'disabled by default' and everything ELSE you might want to see, and THEN some, out of FEAR of getting a bunch of fat lawsuits that they're inclined to LOSE.
Biting the hand that feeds IT
