Yeah, because their incentives strongly align with it. The argument is that the incentives don't align outside of mission critical systems.

Right, agreed. I was replying to this from the comment. Which seemed to claim it was impossible.

> We'll never achieve high reliability for anything but the simplest software

Sorry, I wasn’t very clear!

Sometimes your seemingly non mission critical software can be exploited in such a way that the entire system is cracked wide open.

True and unfortunately this doesn't often result in any damage until way later when someone buys your sensitive documents and commits fraud. By the time the fraud happens, we likely have no idea which breach the info even came from.