It's hard not to see this as ultimately a good thing for the world.
The market will not spend one dime more on security than is needed to maintain lines of business, and that includes things like perception of risk and mitigation.
If there is enough pain, whatever level of baseline security is needed to protect most orgs against these attacks will become the new standard.
And then this threat will be replaced by a new one.