Agreed. You can take software as an example; it's far less regulated than most infrastructure sectors, but how many outages per year does Facebook have? How many times per year are our PII gutted out of an under-secured dataset?

Now, that level of sloppiness, but applied to bridges and skyscrapers? No thanks.