The key is establishing a market for this kind of insurance policy. That can only happen if companies are made liable. That needs to happen at some point, though it's not clear how to do it without getting unpleasant unintended side effects.
Companies already don't like to deal with this stuff right? However much liability already exists, they're already having a bad day trying to patch all this stuff. So maybe they'd want to know they'll get compensated for the resources spent on that.
