I think that this is the layer where this problem should be dealt with at.

What we are in for right now is burdensome, expensive and vague regulation that amounts to security theater.