If developers do not quickly self-police, we will inevitably see government web regulation on password and cc security, which itself will lead to demands and ultimately the reality of web development accreditation.