As doom and gloom as things are generally, I do think things have gotten better.

The question isn't "are companies making some security improvements?". That's one-sided. The question is "are companies making security improvements FAST ENOUGH to deal with the increased risks?"