That's why countries should start to legislate on these matters, there are no incentives in focusing on security and properly report to the customers such vulnerability.