So instead you want to wait until it gets worse? What's the end-game there? With bailing wire and plucky determination the FBI and NSA defend us, forever on guard against the one mistake that may bring it all crumbling down?
This "too big too risk" is precisely why we need this, and needed it twenty years ago. And we need it now, so that we aren't in a worse spot next year, etc.
To lessen the pain maybe for the first few years only "mostly harmless" hacks with full disclosure could be made fully legal. We could ramp up slowly.
The pressure you are talking about would be too great. Things would collapse if it became legal to actively pursue hacking them.