I have yet to see a compelling argument for enshrining security vulnerabilities in law outside of the usual sob stories that like to get echoed in Congressional testimony.