The Cyberspace Solarium Commission report also provides an extensive list of recommendations for improving cybersecurity $$ including that "Congress should pass a law establishing that final goods assemblers of software, hardware, and firmware are liable for damages from incidents that exploit known and unpatched vulnerabilities for as long as they support a product or service."