The marketplace won't sort out the security issues, any more than it sorted out unstable banks. Consumers lack the ability to obtain information, understand the issues, and make good decisions.
Computer systems should be regulated for safety, which includes confidentiality and integrity, like everything else.
Just as a counterpoint to your argument about unstable banks: It appears that the marketplace was sorting out the unstable banks, which is why they needed to be "bailed out" by the government.
If the government had not intervened, those banks would have been bankrupted, and rightfully so, because they essentially made a giant bet on the housing market and lost.
The government intervention in the case of the banks prevented a valuable feedback mechanism from taking place, whereby the "bad players" (as in, bad at the game --- at gambling) would have learned from their mistakes. So instead of the negative feedback of bankruptcy, they got the positive feedback of bailouts, and we should expect to see another financial crisis in the not-too-distant future.
What remains to be seen is whether the government itself has a working feedback mechanism for this situation. Will they bail out the banks again? in other words.
I'm not sure it's a matter of view; it's a matter of fact. Consumers do not have the ability (much less the time!) to understand everything. They can't reliable figure out which bank is stable, which drug will kill them and which will heal their particular illness, they can't figure out which electrical appliance is safe to use and which will electrocute their family, the fire risks of the various buildings they use, and I don't believe they can understand IT security much less evaluate the security of products.
No matter what our worldviews, consumers won't obtain more capability and time. I'm a technical professional and educated person, and I certainly don't have the time or resources to answer those questions, even the very last one.
> What does "regulated" mean to you?
I don't understand the question. In the case of IT security, I can think of many ways to do it: Liability for bad security, rules requiring good security , etc. I don't know enough about regulation to know what works and in what situations, but some minimal rules and liability sound good.
Computer systems should be regulated for safety, which includes confidentiality and integrity, like everything else.