These companies are so massively large that they price in the risk of databreaches as a cost of doing business.

Insurance Underwriters pour through corpo infosec documents, and require only the most basic level of protections.

I think instead, a stricter certification standard needs to be created, and all these large companies must pass ANNUAL audits, or simply lose access to government leased spectrum.