In Germany we have the completely wrong mindset for such things. Instead of being grateful, all we care about is "whose fault is it" and CYA tactics. And no one wants to be "guilty" or have their incompetence revealed, so suits will do anything they can to avoid that. Somethings serious needs to go wrong first, so that loss of face already happens, before anyone will move. Maybe we need to get hacked by Russia a few more times.
How is the home of chaos computer club so bad at this....
There is a kind of naiveté, also at EU level, where people think that once it's a law, bad actors will just fold.
They minds are somehow unable to comprehend that only the good actors will fold and only bad actors will be left.
Other examples are: Firearms possession, supply chain law regarding human rights and child labor.
I was really excited for GDPR until I realized Europe had no intention of actually enforcing it :-(
It is only this degree of malice and incompetence that can give rise to something like the CCC.
Yeah it does feel like much tech competence that sprouts in Germany is either sequestered off and penned in, and/or leaves the country.
You still have quite enough people in high places who are direct or indirect beneficiaries of companies that are either Russian or tied to Russia, so nothing will ever happen even then.