lawfare, In a new Security by Design article, Steven Lipner argues that using a tort model to shift liability for software products from the user to the vendor is the wrong approach and that the mechanism laid out in Executive Order 14028 offers a way forward. https://www.lawfaremedia.org/article/incentives-for-improving-software-security-product-liability-and-alternatives