Real security will come when it's a moneymaker for private companies who want to satisfy public demand for an Internet that isn't crawling with bugs.