Hackers are not going to try to hack all severs. They look for the easiest path. This is one area where it's best to be the ugly duckling at the dance. Make it as difficult as you can for hackers and they will leave you alone for someone easier and more attractive.

As Eric said, it would be great to have industry standards for DBAs and developers. Who would set the standards? I don't know that the government would be the best choice. Do you want different standards for each vendor; Microsoft, IBM, Oracle, open source, etc."

Tom