The UK has a chance to lead the world in proactive software security – but only if we move beyond patchwork fixes.