Thankfully the new cybersecurity laws will help here, when companies map production costs to languages, the needle will keep moving away from those that tank security budgets.

I was actually hoping for far more strict enforcement but so far they're taking it relatively easy.

Indeed, however better slowly than nothing at all.