Then go the opposite route. South Korea fines companies thousands of dollars every day a vulnerability isn't fixed. Security is one of those areas where negative reinforcement works better than positive reinforcement.
I can think of multiple situations where a vendor from SK has left things unpatched for months, and sometimes years..
A $20k car can do far more than $200k in damage.
We don’t limit liability to the price of the vehicle.