how many times has the refrain been repeated about deficiency with "after market" solutions ... that it has to be built in ... not try to affix it on afterwards (aka automobile safety analogy ... things like seat belts, safety glass, air bags, bumpers, crash impact zone, etc).

however, based on the automobile analogy, there may be some evidence that it only happens with gov. mandates.

the safety/security engineers don't disappear with built in security ... but they tend to disappear from public limelight.

misc. old posts that includes raising the aftermarket seat belt analogy
http://www.garlic.com/~lynn/aadsm14.htm#32 An attack on paypal
http://www.garlic.com/~lynn/aadsm16.htm#15 Difference between TCPA-Hardware and a smart card (was: example: secure computing kernel needed)
http://www.garlic.com/~lynn/aadsm17.htm#40 The future of security
http://www.garlic.com/~lynn/aadsm17.htm#56 Question on the state of the security industry
http://www.garlic.com/~lynn/aadsm19.htm#10 Security as a "Consumer Choice" model or as a sales (SANS) model?
http://www.garlic.com/~lynn/aadsm21.htm#16 PKI too confusing to prevent phishing, part 28
http://www.garlic.com/~lynn/aadsm22.htm#28 Meccano Trojans coming to a desktop near you
http://www.garlic.com/~lynn/aadsm26.htm#64 Dr Geer goes to Washington