Regulation is already addressing that. I encourage you to read up on the Cyber Resilience Act.