Some sections of the information security industry are finally realising that their whole approach is failing society, but fixing things will require a human touch.