We need to introduce civil liability for companies that ship products with reckless security vulnerabilities.