No change without real money on the table

If you lose your own data or time as the result of malware that you introduced to your own machine, and there was a merchantable update (effective, efficient, available, reputable, ...) that would have prevented the loss, then it's your own fault. If malware running on your machine causes such a loss to somebody else, then the current situation is likely to persist until you are forced to pay money (tort damages, a government fine, ...) as a result. Probably this will lead to insurance and other legal changes, including shared responsibility if the victim's machine was not running such an update.