It's a massive innovation killer downside. How about we restrict this to "all internet companies selling security software to governments", at the very widest?
Also: It doesn't fix the problem.
Also: It doesn't fix the problem.
It's not uncommon for a mature industry to face a reckoning around damaging practices that were common when they were nascent industries.
Would you like to live below a dam that was built under a loose and permissive regulatory regime? How about storing sensitive personal data in a datacenter whose owner specifically disclaims liability for it's exposure?
They're not the one's paying for it. The people wanting the building built are. And there's a lot of corruption in that. On top of that, there's a pretty clear housing crisis in big cities.
I'm unsure whether that's the industry to follow.