> maybe making manufacturers liable for the damages caused by security holes in their devices

Then they will sell two versions of the same product. One lets you voluntarily waive that requirement for the same price as today, or a "normal" version where it costs orders of magnitude more.