> A method to reliably produce vulnerability-free software is not invented yet

That's not the goal. Well it is, but it's unachievable. We need to get people to care about security beyond ensuring that teenagers can't trivially get in—the current state of affairs for enterprise IT.

A law would at least require companies to give a fuck beyond the "can the CEO's niece break in" level.