But few companies would love to do what it takes to get it.
Things like protecting customer privacy and taking security seriously.
I once saw a 1 hour presentation on the cryptography design of the iPhone compared to an Android phone. The IOS design used layers of fine-grained encryption and was obviously carefully thought out to protect the consumer from: device theft, misbehaving apps, illegal searches by law enforcement, and even nation-state levels of spying.
The Android phone had a feature that basically said "Encrypted: Yes".
That's the difference. I see that difference everywhere, with every organisation. The right attitude gets rabidly loyal customers, the wrong attitude relegates you to the low-cost section of the store.