> software security education for all developers. 1 year of it. Mandatory. Financial penalties for developers and their employers.

Either you offer it completely free to anyone in the entire world, or this is just another barrier to prevent access to the developer "elite".

And btw, often it's not the developer that cuts on security features, but an executive that wants to get to market faster. How about we give compulsory security training to every manager/executive/ceo/etc AND we hold them legally responsible when damages are caused by their eagerness to cut on costs?