Or larger companies start to notice the large gaps in security affecting their bottom line due to reviews with large lines of code getting what's a rubber stamp at best.
I'm guessing this will take years though, companies tend to not care unless they lose large contracts and are happy to throw individual managers or directors under the bus to appease a client.