At some point we have to acknowledge that data is important and that it is easy to collect and hard to secure. Do it right or don't collect it. The 'we have been hacked' or 'we messed up' and now all your data is somewhere else is not OK. If we made their existence dependent on securing this data, don't you think they would start to take it seriously?