> But then people never updated their os/software and we ended up with lots of vulnerabilities.

Perhaps the issue was that we insisted every program be internet connected. If everything were offline a la Battlestar Galactica, security exposure would be greatly reduced - pretty much only the standard USB stick attack vector would work.