[zer00eyz]

This is a terrible analogy.

You're comparing a failing bridge to an attack.

These things are not the same.

We did not sue the designers of the World Trade Center because their buildings could not withstand being hit by a plane.

[erremerre]

Bridges are expected to stand, for example, a lorry hitting at 120km/h speed a pile. Which is "a plausible attack".

[pbhjpbhj]

It may well be a terrible analogy, but your comparison is also terrible.

Basic expectation for any web business is security sufficient to not leak PII (and it's the law almost everywhere). Meanwhile no-one expects, as a basic requirement, that buildings withstand plane crashes.

When buildings don't meet basic safety requirements then people sue. It's a regular occurrence, unfortunately.