>How do we punish them in a severe enough way to encourage making things better?

This is a tough problem, but if we stop or limit the allocation of resources to protect the secretive intellectual property that is autonomoilusly running people over, that is the most effective incentive I can see. Plus it's pretty easy to do.

We don't even have to force them to disclose anything, by affording less legal protection, their employees will open-source it for us.