We don't yet have cybersecurity expertise in government that approaches the environmental science expertise in the EPA (or California's equivalent). And thus far we have a Congress that doesn't recognize the importance, or see a role for the government to regulate these aspects, so they just let the industry write their own rules. And so we've got exactly the system everybody who isn't a consumer wants us to have.

Update: 4 of 535 members of Congress have computer science degrees.