We need more modern laws that define what credible software security providers are and subjects them to basic regulatory inspection (like oil refineries, for example), but also forces hardware OEMs (like Apple, Oculus, etc.) to allow these security companies to audit and digitally sign all factory-loaded firmware images, operating system installers and the apps that are included with hardware purchases or otherwise installed from new third-party app-stores, container repositories and downloadable/net-bootable distro stores, etc.