I have heard that there is an age-old debate in the NSA and CIA about whether it is better to encourage consumer security so that we're less vulnerable, or to encourage the existence of known-to-the-government problems to facilitate signals intelligence.
Ever since 9/11 the signals intelligence side has completely won. And I suspect will continue to until the first major confirmed case of a major cyber attack on the USA that significantly inconveniences the general public. (Ideally an attack from a tiny power - something the size of Al Qaeda circa 9/11 would be perfect.) Then there will be much handwringing over how we could have let ourselves be so vulnerable.
Ever since 9/11 the signals intelligence side has completely won. And I suspect will continue to until the first major confirmed case of a major cyber attack on the USA that significantly inconveniences the general public. (Ideally an attack from a tiny power - something the size of Al Qaeda circa 9/11 would be perfect.) Then there will be much handwringing over how we could have let ourselves be so vulnerable.