What needs to happen is all of these companies need to keep competent tech people on staff, and managers need to be punished for making bad decisions - such as allowing a critical update to go out unchecked. Or allowing such an update to come in to your network without another layer of checking. Or not having sufficient backup or contingency plans when systems go down.
Practically speaking, I think one real change that is needed, there needs to be a better, quicker, way to rapidly automate recovery of computers that are so hosed they won't boot their normal OS.
Blaming Microsoft for all of this is kind of like blaming the construction next door to Champlain Towers South for the building collapse. There is MUCH more to it than that. In both cases, the real culprit is a deep systemic management failure to make sure things were and are designed properly, built properly, maintained properly, and that problems are corrected before disaster hits.
But, you know, that all costs money, so it won't happen. Instead some security company will put on a show, come up with some new buzzwords, throw some AI at it, and nothing will really change.