> security risks and costly errors?

I hope that you're right, but the problem is that the regulatory bodies are captured by the players that they are supposed to regulate. Can you name a time in recent history where a company had to pay a penalty for a harmful action, either intentional or neglectful, that exceeded the profit they gained from the action?