Ideally our critical infrastructure would have a better security track record
yeah and maybe companies will start paying for open source software, but I’m not holding my breath
The difference is that it is bad for business reputation when some of the largest companies on planet are regularly leaking data through exploits. Testing will become an economic requirement over time.