The real solution in my opinion is educating people on security. not just developers, but also end users, sales people, and product managers.<p>When users start choosing the robust and secure product over the quick and insecure product, sales will pick that up, product will follow, and programmers will treat security just like any other feature.