As soon as a politician attempts to do so in a serious fashion, they will have to fight the entire lobbying (see bribery) might of the insurance indistry.
Thats why im amazed Mitt Romney (IIRC he was governer at the time) was able to do what he did in Massachusettes (state mandated healthcare with a state run insurer, along with private entities not wanting him out of office). That system threaded the political needle, the dems got their state run healthcare marketplace, and the repubs got their “this is good for business” from their handlers, and once the paint dried, he still had the clout to move to up to congress and make a run for the white house. Later, the ACA/ObamaCare was based off that system, yah kids, ObamaCare is technically a Republican invention (say that at thanksgiving and see which relatives squirm).
Thats about the most “for the public good” model we could make at the time to make most everyone happy, and its not great. Some of the regulations like “no pre-existing condition denials” are pretty damn important now, to the point that .95 cant throw the baby out with the bathwater without pissing a lot of people off.
Most white hat pen testers apply their trade under contract for security audits. A lot of companies, especially those that work for governments, have requirements to get security audits regurally. It is not outside the realm of reason to hire a company, lay out the rules of engagment, have them assign a team to try, try to break in, detail what they did and any vulnerabilities that were found.
The flip side is that these people are paid very very well to do this (especially people who will risk their skin on physicial security). They take a very “defense against the dark arts” methodology, the best way to teach people how to defend against attacks is to actually attack them and tell them where they messed up. For that reason, you get conventions like DEFCON where security experts from alphabet soup agencies, private sector, white, black and grey hats all meet to see what the others are doing. The presentations are a blast to watch, if you can undertand the arcane runes and rituals of the worlds best security wizards.