It sounds like a necessary but painful change if we want secure by default.