Comment by miohtama

Massive reorganisation will only happen if companies with poor security record go out of business, while competent ones win market share.

Otherwise shareholders do not care, because they do not have skin in the game.

Same for government staff. Unless they are explicitly fired there are no consequences of abusing the trust of public.