Not every smart contract needs to be unique or original. A well-audited library of reusable smart contracts that is published and/or endorsed by a coalition of reputable entities can provide most of the functionality that most businesses and people would typically need. Think of the standard form agreements that are offered by companies like LegalZoom, etc.

Yes, Ethereum's security model is a problem. There's no reason to believe, however, that it won't be improved upon.