Fact is, none of these network providers will work to secure their own infrastructure if they aren't required to, or have financial incentive. They have no reason to improve their systems aside from making money. Threaten that, and they'll get on board with being more rigid in their security standards.
Your argument is with late-stage capitalism, not the actual effect of my comment.